PT-2026-64431

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description The WOPI PUT RELATIVE handler incorrectly processes the X-WOPI-SuggestedTarget variable by passing it to URI.JoinRaw as a path instead of a filename. This allows the use of slash and dot-dot...

Important: containerd

Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...