This repository was archived by the owner on Nov 23, 2025. It is now read-only.
This repository was archived by the owner on Nov 23, 2025. It is now read-only.
vulnerability in AChat project #251
Description
While working on AChat project, I discovered a cache deception vulnerability in the better-call npm package (this dependency used by AChat). The issue stems from insufficient path sanitization, which allows attackers to craft deceptive requests that can bypass CDN rules and expose sensitive user data.