4025 matches found
PT-2026-79392
Name of the Vulnerable Software and Affected Versions Stable Diffusion WebUI affected versions not specified Description The is path trusted function in scripts/iib/api.py improperly validates requested paths by using path.startswithparent path without appending a path separator. This allows acce...
CVE-2026-77814: Improper Limitation of a Pathname to a Restricted Directory
ispathtrusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswithparentpath, without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed ...
PT-2026-79393
to abs path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison performed by is path trusted in scripts/iib/api.py...
CVE-2026-40460 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-42926 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-82W2-X7HF-5H8R vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-42934 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-6VMC-2WH4-77QP vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-42946 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-H7RQ-F9GQ-MC8R vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-V43F-895R-CHHH vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-X88Q-X2R7-VG3G vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-27784 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-32647 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-6R46-2QJX-J5J3 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-HWQ5-42J9-JVQJ vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-28755 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-HGFR-JMPR-2P89 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
