EIP-2026-103988

The vulnerability in Mongoose 2.8 allows remote file disclosure due to improper input sanitization. An attacker can exploit this by appending spaces or special characters to a URI to view source code of files, aiding further attacks.