From 190dfb9dc630c98073be5d6ad3b37c26ef0a5d9c Mon Sep 17 00:00:00 2001 From: David Pedersen Date: Sat, 22 Jan 2022 16:22:46 +0100 Subject: [PATCH] Update which tower-http versions are affected by RUSTSEC-2021-0135 (#1166) --- crates/tower-http/RUSTSEC-2021-0135.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crates/tower-http/RUSTSEC-2021-0135.md b/crates/tower-http/RUSTSEC-2021-0135.md index 9f59214..24dcc24 100644 --- a/crates/tower-http/RUSTSEC-2021-0135.md +++ b/crates/tower-http/RUSTSEC-2021-0135.md @@ -11,7 +11,7 @@ keywords = ["directory traversal", "http"] os = ["windows"] [versions] -patched = [">= 0.2.1"] +patched = [">= 0.2.1", ">= 0.1.3, < 0.2.0"] ``` # Improper validation of Windows paths could lead to directory traversal attack