CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy

A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...

CVE-2026-98201

In the Linux kernel, the following vulnerability has been resolved: Input: zero ffeffect before compat copy in inputffeffectfromuser In the compat path inputffeffectfromuser aliases the caller's native struct ffeffect with the smaller struct ffeffectcompat and copies only the compat sized prefix:...

CVE-2026-106552: Relative Path Traversal

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

PT-2026-115069

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.20 Description The copy model function in scheduler/ipp.c creates a predictable file path in a directory writable by the lp-group. Because the file is opened as root without using O EXCL or O NOFOLLOW...

PT-2026-115070

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.20 Description In the copy banner function within scheduler/ipp.c, the system improperly handles the attributes-natural-language value provided by a user when processing a job-sheets banner. An attacker...

PT-2026-107273

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.6 Description A directory traversal issue exists in the sftp component. During a recursive copy operation, a server can trigger this flaw, allowing files to be written to unintended locations on the system...

ROS-20261006-73-0247

The vulnerability in the arch/arm64/kernel/hibernate.c component of the Linux operating system relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106574

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A use-after-free issue exists in the btrfs module. The mark block group to copy function iterates over the commit root with skip locking=true. A concurrent transaction commit can swap and...

PT-2026-106565

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description The mhi mbim rx function fails to check the return value of skb copy bits when copying datagrams from the NTB Network Transfer Buffer. Because the datagram offset and length are provided by...

@backland/accounts (>=0.0.0-alpha.20221203225619041, <=0.2.10), @backland/entity (>=0.0.0-alpha.20221203225619041, <=0.2.10) +111 more potentially affected by unknown CVE via fast-copy (>=3.0.0, <=3.0.2)

fast-copy NPM version =3.0.0, =0.0.0-alpha.20221203225619041, =0.0.0-alpha.20221203225619041, =0.0.0-alpha.20221219193950991, =0.0.0-alpha.20221203225619041, =0.0.0-alpha.20221203225619041, =0.0.0-alpha.20221203225619041, =0.0.0-alpha.20221203225619041, =6.9.5, =11.1.0, =0.0.1-evm.15,...

GHSA-JGGR-W7FW-PC2J fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

Summary fast-copy traverses values recursively with no bound on depth. Copying a sufficiently deeply-nested value exhausts the JavaScript call stack and throws a native RangeError: Maximum call stack size exceeded from inside the library. Details Both copy and copyStrict recurse once per level of...

@alessiodf/crypto (3.2.2), @backland/entity (>=0.1.2-alpha.20220922T231248-0300.1, <=0.1.3-alpha.20221006T210325-0300.2) +28 more potentially affected by unknown CVE via fast-copy (>=2.0.3, <=2.1.7)

fast-copy NPM version =2.0.3, =0.1.2-alpha.20220922T231248-0300.1, =0.1.3-alpha.20221005211950.0, =0.1.2-alpha.20220922T231248-0300.1, =0.1.3-alpha.20221005211950.0, =0.1.2-alpha.20220922T231248-0300.1, =0.1.0, =0.1.0, =0.1.0, =2.0.0-alpha.20220809T004809-0300.29,...

@carefrees/table-async-validator (>=0.0.4, <=0.0.12), @fairys/pc-valtio-form-basic (>=0.0.13, <=1.0.6) +63 more potentially affected by unknown CVE via fast-copy (>=4.0.0, <=4.0.4)

fast-copy NPM version =4.0.0, =0.0.4, =0.0.13, =0.0.13, =0.0.13, =0.0.13, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-rc.9 and more Source cves: unknown CVE Source advisory:...

@carefrees/table-async-validator (>=0.0.4, <=0.0.12), @fairys/pc-valtio-form-basic (>=0.0.13, <=1.0.6) +63 more potentially affected by unknown CVE via fast-copy (>=4.0.0, <=4.0.4)

fast-copy NPM version =4.0.0, =0.0.4, =0.0.13, =0.0.13, =0.0.13, =0.0.13, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-evm.46, =0.0.1-rc.9 and more Source cves: unknown CVE Source advisory:...

@backland/accounts (>=0.0.0-alpha.20221203225619041, <=0.2.10), @backland/entity (>=0.0.0-alpha.20221203225619041, <=0.2.10) +111 more potentially affected by unknown CVE via fast-copy (>=3.0.0, <=3.0.2)

fast-copy NPM version =3.0.0, =0.0.0-alpha.20221203225619041, =0.0.0-alpha.20221203225619041, =0.0.0-alpha.20221219193950991, =0.0.0-alpha.20221203225619041, =0.0.0-alpha.20221203225619041, =0.0.0-alpha.20221203225619041, =0.0.0-alpha.20221203225619041, =6.9.5, =11.1.0, =0.0.1-evm.15,...

NPM: fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

NPM: fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values vulnerability discovered by ? in WordPress Npm fast-copy versions 2.2.0...

fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

Summary fast-copy traverses values recursively with no bound on depth. Copying a sufficiently deeply-nested value exhausts the JavaScript call stack and throws a native RangeError: Maximum call stack size exceeded from inside the library. Details Both copy and copyStrict recurse once per level of...

@alessiodf/crypto (3.2.2), @backland/entity (>=0.1.2-alpha.20220922T231248-0300.1, <=0.1.3-alpha.20221006T210325-0300.2) +28 more potentially affected by unknown CVE via fast-copy (>=2.0.3, <=2.1.7)

fast-copy NPM version =2.0.3, =0.1.2-alpha.20220922T231248-0300.1, =0.1.3-alpha.20221005211950.0, =0.1.2-alpha.20220922T231248-0300.1, =0.1.3-alpha.20221005211950.0, =0.1.2-alpha.20220922T231248-0300.1, =0.1.0, =0.1.0, =0.1.0, =2.0.0-alpha.20220809T004809-0300.29,...