CVE-2026-120325

A security vulnerability exists in Webpro-nl Knip (up to version 6.44.0) within the Workspace Handler component. Specifically, the writeFile function in packages/knip/src/IssueFixer.ts fails to properly sanitize the workspaces argument, leading to a path traversal vulnerability. This flaw allows ...