CVE-2026-63416: Improper Limitation of a Pathname to a Restricted Directory

draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, src/main/java/com/mxgraph/online/ExportProxyServlet.java uses request.getPathInfo to build a proxyPath and appends it directly to EXPORTURL without rejecting dot segments or confirming that the normalize...

CVE-2026-49453: Improper Input Validation

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, Joplin accepts synchronized resource metadata whose id or fileextension contains parent-directory or path-separator characters. BaseItem.unserialize stores the...

CVE-2026-59816: Improper Limitation of a Pathname to a Restricted Directory

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, the GET /api/transcribe/:id and POST /api/transcribe/:id handlers in packages/server/src/routes/api/transcribe.ts on Joplin Server instances with TRANSCRIBEENABLED=true pass t...

PT-2026-96035

Name of the Vulnerable Software and Affected Versions nvm versions prior to 0.40.8 Description The nvm alias function fails to perform a containment check when concatenating a requested version or alias name to the $NVM DIR/alias directory. This allows a name containing .. components to escape th...

PT-2026-96150

Name of the Vulnerable Software and Affected Versions draw.io versions prior to 30.2.7 Description The ExportProxyServlet.java component uses request.getPathInfo to construct a proxyPath which is appended to the EXPORT URL. Because the application fails to reject dot segments or verify that the...

EulerOS Virtualization 2.10.0 : acl (EulerOS-SA-2026-3860)

According to the versions of the acl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile,...

EulerOS Virtualization 2.10.1 : perl-Archive-Tar (EulerOS-SA-2026-3845)

According to the versions of the perl-Archive-Tar packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction...

CVE-2026-79318

The software web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d ) is vulnerable to a Directory Traversal flaw. The root cause is located within the read_file() and write_file() functions in the applications/admin/controllers/webservices.py component. This vulnerability could all...

PT-2026-96284

Name of the Vulnerable Software and Affected Versions NotebookLM MCP versions 1.6.0 through 2.0.2 Description NotebookLM MCP contains a path traversal issue where attacker-controlled values in the vault dir and slug prefix variables can cause Markdown and JSON files to be written outside the...

CVE-2026-61647: Improper Limitation of a Pathname to a Restricted Directory

NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the POST /batch-to-vault endpoint, also exposed through the batchtovault MCP...

PT-2026-96242

web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in read file/write file applications/admin/controllers/webservices.py...

PT-2026-96320

Name of the Vulnerable Software and Affected Versions OctoPrint version 1.0.0 Description A path traversal issue exists in the File Download API component within the validate function of the src/octoprint/server/api/files.py file. A remote attacker can manipulate the filename argument to access...

CVE-2026-79318: Improper Limitation of a Pathname to a Restricted Directory

web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in readfile/writefile applications/admin/controllers/webservices.py...

CVE-2026-15801: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host...

EulerOS Virtualization 2.10.1 : acl (EulerOS-SA-2026-3826)

According to the versions of the acl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile,...

CVE-2026-62369: Improper Limitation of a Pathname to a Restricted Directory

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.16.0 until 1.21.2, 1.22.2, and 1.23.1, the DecompressTarGz function in keadm/cmd/keadm/app/cmd/util/common.go joins archive entry names to the extraction destinatio...

VulnCheck KEV: CVE-2018-13980

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is installed, because of assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal...

Linux Distros Unpatched Vulnerability : CVE-2026-93751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uri-js through 4.4.1 contains an improper UTF-8 decoding vulnerability in pctDecChars that decodes invalid and overlong percent-encoded sequences into ASCII...

CVE-2026-52835: Improper Limitation of a Pathname to a Restricted Directory

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the importconfig handler and the databasefile branch of importdatabase in plexpy/webserve.py join the attacker-controlled configfile.filename or databasefile.filename directly to CACHEDIR without...

CVE-2026-53940: Improper Limitation of a Pathname to a Restricted Directory

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parseentrypointdef in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...