Resolve PRISMA-2022-0393 and PRISMA-2022-0394

[AgNess-G]

Description

vulnerability descriptions

github.com/gin-gonic/gin module from all versions is vulnerable to Path Traversal due to multiple encodings in path parameters.

and

github.com/gin-gonic/gin module from all versions is vulnerable to Path Traversal due to wildcard parameters incorrectly decoding URIs recursively. The wildcard request parameter should get the full path after the "/". If the path will contain some URL Encoded slashes (%2F), they get recursively decoded, which is incorrect and could lead to a Path Traversal issue.

can we get this resolved? is there a requirement for multiple encodings

this seems to be a related issue

Gin Version

Gin v1.11.0.

Can you reproduce the bug?

Yes

Source Code

No response

Go Version

No response

Operating System

No response