CVE-2025-46096: Solon Vulnerable to Directory Traversal

June 13, 2025

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component

References

gist.github.com/yaoyao-cool/1b7d80930fea88b6fd4839646cedc437
github.com/advisories/GHSA-m63q-4hr8-5r5h
github.com/opensolon/solon
github.com/opensolon/solon/commit/49a3bf95fdcf050829843004b65a2b336ca6ddff
github.com/opensolon/solon/issues/357
nvd.nist.gov/vuln/detail/CVE-2025-46096

Code Behaviors & Features

Detect and mitigate CVE-2025-46096 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →