CVE-2026-113664

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated importer can submit a tar entry whose normalized destination targets a directory while bypassing the literal parent-path substring guard. Opening that directory as a wri...

CVE-2026-113664 ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated importer can submit a tar entry whose normalized destination targets a directory while bypassing the literal parent-path substring guard. Opening that directory as a wri...

EUVD-2026-105211

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated importer can submit a tar entry whose normalized destination targets a directory while bypassing the literal parent-path substring guard. Opening that directory as a wri...

CVE-2026-113664 ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated importer can submit a tar entry whose normalized destination targets a directory while bypassing the literal parent-path substring guard. Opening that directory as a wri...

CVE-2026-113664

The ApostropheCMS Node.js content management system contains a vulnerability in the import-export module prior to version 3.7.0 . An authenticated importer can bypass the literal parent-path substring guard by submitting a tar entry whose normalized destination targets a directory (e.g., using ./...

Chris Trudesk input validation error vulnerability

Versions 1.2.11 and earlier of Chris Trudesk contain an input validation error vulnerability. This vulnerability stems from server-side JavaScript injection in the search parameter; authenticated users can inject code into MongoDB’s $where clause. By disabling regular expressions in GET...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because the Redis reply parser fails to limit recursion depth; as a result, remote peers on the Redis server return deeply nested RESP array replies, potentially causing the bRPC...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because the HTTP/2 HPACK decoder fails to limit recursion depth. Remote attackers can exploit this by sending specially crafted HTTP/2 header blocks containing numerous consecutive...

Vyper buffer error vulnerability

Vyper versions from 0.1.0b4 up to but not including 0.3.0 contain a buffer error vulnerability. This vulnerability arises when an internal function call is made within an array, causing an incorrect top-of-stack pointer value. It may lead to memory corruption and resulting in erroneous contract...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 contain a buffer error vulnerability. This vulnerability arises because clientclipresentgatewaymessage passes the byte count as the precision for printf on wide characters. A malicious RD Gateway can send pre-authenticated consent or service messages, causing t...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to fully verify the macOS off-screen rendering frame data from the GPU process. This can allow attackers who have obtained code...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability arises from the Android client not verifying the mappedWidth and mappedHeight values. An attacker can send a specially crafted RDP GFXMAPSURFACETOWINDOWPDU with an excessively large size, causing...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability stems from the DVIADPCM block-aligning arithmetic operations in the rdpnsndserverselectformat function of the server’s rdpnsnd channel. Integer round-off occurs, and validations are bypassed. A malicious RDP...

Apache Traffic Server resource management error vulnerability

A resource management error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability arises from exhausting the worker pool of HTTP/1.1 sources by truncating the HTTP/2 Content-Length value, potentiall...

Apache Traffic Server input validation error vulnerability

A input validation error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability arises when a client sends a POST request containing Expect: 100-continue, and the source server responds before readin...

Vyper buffer error vulnerability

Vyper versions prior to 0.2.9 contain a buffer error vulnerability. This vulnerability arises because the forwarder proxy deployed via the built-in createforwarderto function reports a fixed value of 4096 bytes for RETURNDATASIZE instead of the actual size of returned data. When the function...

Splunk SOAR processing logic error vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain a logic error vulnerability stemming from a failure in protection mechanisms...

ekko-studio input validation error vulnerability

Versions 1.0.6 and earlier of ekko-studio contain an input validation error vulnerability. This vulnerability stems from improper handling of the outputpath parameter in the saveGeneratedImages function within the Media Generation API component, specifically in the file...

WSO2 API Manager input validation error vulnerability

Versions 4.1.0 through 4.1.0.153, 4.2.0 through 4.2.0.105, and 4.3.0 through 4.3.0.20 of WSO2 API Manager contain an input validation error vulnerability. This vulnerability arises because the callback URL parameter fails to validate user-supplied inputs; it may be exploited by malicious actors t...

Pillow resource management error vulnerability

Versions of Pillow from 5.1.0 up to but not including 13.0.0 contain a resource management error vulnerability. This vulnerability arises because PdfParser.linearizepagetree in src/PIL/PdfParser.py fails to track repeated indirect references. When processing malicious PDFs that reference the same...