Nick Craig-Wood 142172c21f serve docker: reject volume names resolving to the base directory itself GHSA-p6vx-hf7p-98j6 ...

An empty or "." volume name joined onto the base directory resolves to the
base directory itself. newVolume does not call validate, so such a name
would mount a remote over the base directory and shadow every other
volume's mountpoint.

Require the resolved mountpoint to be a strict descendant of the base
directory so these degenerate names are refused.

2026-09-04 19:00:22 +01:00

..

dlna

build: modernize with "go fix -errorsastype": use errors.AsType

2026-08-21 12:23:31 +01:00

docker

serve docker: reject volume names resolving to the base directory itself GHSA-p6vx-hf7p-98j6

2026-09-04 19:00:22 +01:00

ftp

serve ftp: fix auth-proxy sessions sharing credentials by username GHSA-c476-6w5q-jw77 CVE-PENDING

2026-09-04 19:00:22 +01:00

http

serve: refactor VFS and proxy handling into Provider

2026-08-18 09:03:12 +01:00

nfs

serve: fix VFS instance leaks on server startup failures and shutdown

2026-08-18 09:03:12 +01:00

proxy

serve s3: fix auth proxy accepting any request signed with an empty secret GHSA-xwwr-4h3p-r22c CVE-PENDING

2026-09-04 19:00:22 +01:00

restic

serve restic: fix path traversal above the served directory GHSA-45pq-889g-fcgh CVE-PENDING

2026-07-31 13:21:59 +01:00

s3

serve s3: fix auth proxy accepting any request signed with an empty secret GHSA-xwwr-4h3p-r22c CVE-PENDING

2026-09-04 19:00:22 +01:00

servetest

serve s3: fix auth proxy accepting any request signed with an empty secret GHSA-xwwr-4h3p-r22c CVE-PENDING

2026-09-04 19:00:22 +01:00

sftp

serve sftp: fix auth proxy configured via rc being silently ignored GHSA-p569-5gjg-9cmj CVE-PENDING

2026-09-04 19:00:22 +01:00

webdav

serve: refactor VFS and proxy handling into Provider

2026-08-18 09:03:12 +01:00

rc_test.go

serve: update serve remote control to use ParseOptions

2026-07-29 19:42:45 +01:00

rc.go

serve: update serve remote control to use ParseOptions

2026-07-29 19:42:45 +01:00

serve.go

http: add basic metadata and provide it via serve

2025-11-17 16:52:30 +00:00