Repository navigation
Security: unjs/unstorage
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
`prefixStorage` prefixes containing `?` resolve to another namespaceGHSA-wwj3-fjp3-wfmc published
Oct 29, 2026 by pi0High -
Storage server `authorize` receives a different key than the one it reads or writesGHSA-f334-rqgm-fqwm published
Oct 29, 2026 by pi0Moderate -
Unencoded storage keys allow path traversal in URL-based driversGHSA-2xh8-rx79-g84q published
Oct 29, 2026 by pi0Critical
Learn more about advisories related to unjs/unstorage in the GitHub Advisory Database