vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

A flaw was found in Vim's zip.vim plugin. A local user could be tricked into opening a specially crafted zip archive, which would allow a path traversal bypass. This vulnerability enables an attacker to overwrite arbitrary files on the system, potentially leading to data integrity issues or furth...

CVE-2026-94185 nvm alias resolution follows `..` and discloses files outside $NVM_DIR/alias

nvm resolves a requested version or alias by treating it as a filename under $NVMDIR/alias. Before 0.40.8, nvmalias concatenated the requested name onto that directory and read the result with no containment check, so a name containing a .. component escaped the alias directory; under the default...

CVE-2026-94185 nvm alias resolution follows `..` and discloses files outside $NVM_DIR/alias

nvm resolves a requested version or alias by treating it as a filename under $NVMDIR/alias. Before 0.40.8, nvmalias concatenated the requested name onto that directory and read the result with no containment check, so a name containing a .. component escaped the alias directory; under the default...

CVE-2026-94185 nvm alias resolution follows `..` and discloses files outside $NVM_DIR/alias

nvm resolves a requested version or alias by treating it as a filename under $NVMDIR/alias. Before 0.40.8, nvmalias concatenated the requested name onto that directory and read the result with no containment check, so a name containing a .. component escaped the alias directory; under the default...

CVE-2026-94185

CVE-2026-94185 is a path traversal vulnerability in nvm (Node Version Manager) affecting versions before 0.40.8 . The function nvm_alias() concatenates a requested version or alias name onto $NVM_DIR/alias and reads the result with no containment check , so a name containing a .. component escape...

EUVD-2026-83825

nvm resolves a requested version or alias by treating it as a filename under $NVMDIR/alias. Before 0.40.8, nvmalias concatenated the requested name onto that directory and read the result with no containment check, so a name containing a .. component escaped the alias directory; under the default...

PT-2026-96166

Name of the Vulnerable Software and Affected Versions KubeEdge versions 1.16.0 through 1.21.1 KubeEdge versions 1.22.0 through 1.22.1 KubeEdge versions 1.23.0 Description The DecompressTarGz function in keadm/cmd/keadm/app/cmd/util/common.go fails to sufficiently validate archive entry names when...

EulerOS Virtualization 2.10.0 : acl (EulerOS-SA-2026-3860)

According to the versions of the acl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile,...

CVE-2026-59816: Improper Limitation of a Pathname to a Restricted Directory

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, the GET /api/transcribe/:id and POST /api/transcribe/:id handlers in packages/server/src/routes/api/transcribe.ts on Joplin Server instances with TRANSCRIBEENABLED=true pass t...

CVE-2026-49453: Improper Input Validation

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, Joplin accepts synchronized resource metadata whose id or fileextension contains parent-directory or path-separator characters. BaseItem.unserialize stores the...

CVE-2026-94185: Improper Limitation of a Pathname to a Restricted Directory

nvm resolves a requested version or alias by treating it as a filename under $NVMDIR/alias. Before 0.40.8, nvmalias concatenated the requested name onto that directory and read the result with no containment check, so a name containing a .. component escaped the alias directory; under the default...

PT-2026-96035

Name of the Vulnerable Software and Affected Versions nvm versions prior to 0.40.8 Description The nvm alias function fails to perform a containment check when concatenating a requested version or alias name to the $NVM DIR/alias directory. This allows a name containing .. components to escape th...

EulerOS Virtualization 2.10.1 : perl-Archive-Tar (EulerOS-SA-2026-3845)

According to the versions of the perl-Archive-Tar packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction...

PT-2026-96150

Name of the Vulnerable Software and Affected Versions draw.io versions prior to 30.2.7 Description The ExportProxyServlet.java component uses request.getPathInfo to construct a proxyPath which is appended to the EXPORT URL. Because the application fails to reject dot segments or verify that the...

CVE-2026-63416: Improper Limitation of a Pathname to a Restricted Directory

draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, src/main/java/com/mxgraph/online/ExportProxyServlet.java uses request.getPathInfo to build a proxyPath and appends it directly to EXPORTURL without rejecting dot segments or confirming that the normalize...

CVE-2026-79318

The software web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d ) is vulnerable to a Directory Traversal flaw. The root cause is located within the read_file() and write_file() functions in the applications/admin/controllers/webservices.py component. This vulnerability could all...

PT-2026-96284

Name of the Vulnerable Software and Affected Versions NotebookLM MCP versions 1.6.0 through 2.0.2 Description NotebookLM MCP contains a path traversal issue where attacker-controlled values in the vault dir and slug prefix variables can cause Markdown and JSON files to be written outside the...

PT-2026-96320

Name of the Vulnerable Software and Affected Versions OctoPrint version 1.0.0 Description A path traversal issue exists in the File Download API component within the validate function of the src/octoprint/server/api/files.py file. A remote attacker can manipulate the filename argument to access...

PT-2026-96242

web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in read file/write file applications/admin/controllers/webservices.py...

CVE-2026-61647: Improper Limitation of a Pathname to a Restricted Directory

NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the POST /batch-to-vault endpoint, also exposed through the batchtovault MCP...