CVE-2026-30633

🗓️ 21 Jul 2026 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 35 Views🌐 WEB

CVE-2026-30633 is a directory traversal in knowns-dev knowns 0.11.4 via crafted path.

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2026-30633	21 Jul 202600:00	–	cvelist
Mend	CVE-2026-30633	21 Jul 202600:00	–	mend
NVD	CVE-2026-30633	21 Jul 202621:16	–	nvd
Positive Technologies	PT-2026-62075	21 Jul 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-30633: Improper Limitation of a Pathname to a Restricted Directory	21 Jul 202600:00	–	rapid7
VulnCheck KEV	VulnCheck KEV: CVE-2026-30633	24 Sep 202600:00	–	vulncheck_kev
Vulnrichment	CVE-2026-30633	21 Jul 202600:00	–	vulnrichment

Source	Link
github	www.github.com/knowns-dev/knowns/commit/62fb0daaa0b9e66fce1d42c02b5bb519367cf669
gist	www.gist.github.com/spdc-elm/5e19d66402307bdfc8b25ab27469172f

Parameter	Position	Path	Description	CWE
path	path	/knowns-dev/knowns/get_doc	Directory traversal vulnerability via crafted path in get_doc tool.	CWE-22
path	path	/knowns-dev/knowns/update_doc	Directory traversal vulnerability via crafted path in update_doc tool.	CWE-22

22 Jul 2026 20:50Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

EPSS0.00888

SSVC

directory traversal knowns dev get document tool update document tool version 0.11.4