287 matches found
GO-2023-2328 vulnerabilities
Vulnerabilities for packages: rclone...
CVE-2026-19372
A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...
CVE-2026-19372 Handwriting-OCR handwriting-ocr-mcp-server upload_document index.ts fs.readFileSync path traversal
A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...
PT-2026-56305
Name of the Vulnerable Software and Affected Versions goploy version 1.17.5 Description An Insecure Direct Object Reference IDOR exists in the project and project-file handlers. The application fails to verify if a project or project-file belongs to the caller's namespace when processing requests...
Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)
Azure File Sync Agent v22.4 Release – June 2026 KB5104852...
Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)
Azure File Sync Agent v22.4 Release – June 2026 KB5104852...
Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)
Azure File Sync Agent v22.4 Release – June 2026 KB5104852...
Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)
Azure File Sync Agent v22.4 Release – June 2026 KB5104852...
Mattermost Server 10.11.x < 10.11.16 / 11.5.x < 11.5.5 / 11.6.x < 11.6.2 Multiple Vulnerabilities (MMSA-2026-00616 / MMSA-2026-00649 / MMSA-2026-00655 / MMSA-2026-00656 / MMSA-2026-00661 / MMSA-2026-00662 / MMSA-2026-00665)
The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities: - Mattermost fails to require role-management authorization when setting the schemeadmin flag on group syncable link and patch endpoints, which allows a user with group-link permissions to...
CVE-2026-40987 Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization
A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem outside the configured local-directory with attacker-controlled content. Affected versions: Spring Integration 7.0.0 through 7.0.4; 6.5.0 through 6.5.8; 6.4.0 through 6.4.11; 6.3.0 through...
Linux Distros Unpatched Vulnerability : CVE-2026-46160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix missing lastunlinktrans update when removing a directory When removing a directory we are not updating its lastunlinktrans field, which can result in...
Azure File Sync Agent v22.3 Release – April 2026 (KB5087090)
Azure File Sync Agent v22.3 Release – April 2026 KB5087090...
Azure File Sync Agent v22.3 Release – April 2026 (KB5087090)
Azure File Sync Agent v22.3 Release – April 2026 KB5087090...
Azure File Sync Agent v22.3 Release – April 2026 (KB5087090)
Azure File Sync Agent v22.3 Release – April 2026 KB5087090...
Azure File Sync Agent v22.3 Release – April 2026 (KB5087090)
Azure File Sync Agent v22.3 Release – April 2026 KB5087090...
CVE-2026-23465
CVE-2026-23465 affects the Linux kernel (btrfs) where logging the parent directory of a no-longer-existing conflicting inode could skip logging the directory’s new dentries, causing missing dentries after a power loss when an fsync occurs. The issue is resolved by logging new dir dentries wheneve...
OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal
Summary OpenShell Mirror Sync: Sandbox Escape via Unrestricted File Sync + Symlink Traversal Current Maintainer Triage - Status: narrow - Normalized severity: high - Assessment: v2026.3.28 still has the mirror-boundary bug because shipped c02ee8 only excluded hooks while unreleased 3b9dab is the...
Moderate: rsync security update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...