CVE-2021-33896: Dino

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators.

Affected products

  • Dino Dino: before 0.1.2 (fixed in 0.1.2); from 0.2.0, before 0.2.1 (fixed in 0.2.1)
  • Fedoraproject Fedora: version 33 only; version 34 only

Published 2021-06-07. Last modified 2026-06-17.