CVE-2021-3916: 
NixOS vulnerability analysis and mitigation

BookStack, a self-hosted platform for organizing and storing information, was found to be vulnerable to Path Traversal attacks (CVE-2021-3916). The vulnerability was discovered and reported on October 31, 2021, affecting the image serving functionality of the application (CVE MITRE).

The vulnerability was identified as an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') issue in BookStack's image serving functionality. The flaw allowed potential attackers to traverse directory paths, potentially accessing files outside the intended directory structure (GitHub Commit).

The vulnerability could allow unauthorized access to files outside the intended image directory, potentially exposing sensitive system files and information stored on the server (CVE MITRE).

The issue was addressed through a security patch that implemented proper path validation and restricted file access to only image files. The fix included additional checks to verify that requested files exist in the secure storage location and are valid image files (GitHub Commit).