This repository was archived by the owner on Sep 8, 2025. It is now read-only.
This repository was archived by the owner on Sep 8, 2025. It is now read-only.
vulnerability in solstatus project #123
Description
While working on solstatus project, I discovered a cache deception vulnerability in the better-call npm package (this dependency used by solstatus). The issue stems from insufficient path sanitization, which allows attackers to craft deceptive requests that can bypass CDN rules and expose sensitive user data.