CVE-2026-124508

The floci-io Floci tool (versions up to 2.4.0 ) is vulnerable to a remote path traversal vulnerability in the Artifact Handler component. The root cause is located in the BuildspecParser.parseArtifacts function within the file src/main/java/io/github/hectorvent/floci/services/codebuild/CodeBuildJ...

EUVD-2026-119769

A vulnerability was determined in floci-io Floci up to 2.4.0. Impacted is the function BuildspecParser.parseArtifacts of the file src/main/java/io/github/hectorvent/floci/services/codebuild/CodeBuildJsonHandler.java of the component Artifact Handler. This manipulation of the argument...

CVE-2026-124508: floci-io Floci: A vulnerability was determined in floci-io Floci up to 2.4.0

A vulnerability was determined in floci-io Floci up to 2.4.0. Impacted is the function BuildspecParser.parseArtifacts of the file src/main/java/io/github/hectorvent/floci/services/codebuild/CodeBuildJsonHandler.java of the component Artifact Handler. This manipulation of the argument...