VYPR

crafatar

by crafatar

CVEs (1)

  • CVE-2024-24756Feb 1, 2024
    risk 0.00cvss epss 0.00

    Crafatar serves Minecraft avatars based on the skin for use in external applications. Files outside of the `lib/public/` directory can be requested from the server. Instances running behind Cloudflare (including crafatar.com) are not affected. Instances using the Docker…