CVE-2026-49342: Traverse Request Path Via Join

Directory traversal vulnerability due to joining an unsanitized request path with a document root.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Ruby
greprules fetch cve-2026-49342-traverse-request-path-via-join --engine opengrep

Description

Directory traversal vulnerability due to joining an unsanitized request path with a document root.