195821 matches found
CVE-2026-86775 knowns before 0.30.0 Path Traversal via Document API
knowns npm package versions = 0.29.1 contain a path traversal vulnerability in the Document API. The HTTP handler in internal/server/routes/docs.go normalizes the user-supplied document path with cleanDocPath, which strips leading/trailing slashes and the .md suffix but does not neutralize ../...
CVE-2026-86775 knowns before 0.30.0 Path Traversal via Document API
knowns npm package versions = 0.29.1 contain a path traversal vulnerability in the Document API. The HTTP handler in internal/server/routes/docs.go normalizes the user-supplied document path with cleanDocPath, which strips leading/trailing slashes and the .md suffix but does not neutralize ../...
EUVD-2026-74952
knowns npm package versions = 0.29.1 contain a path traversal vulnerability in the Document API. The HTTP handler in internal/server/routes/docs.go normalizes the user-supplied document path with cleanDocPath, which strips leading/trailing slashes and the .md suffix but does not neutralize ../...
CVE-2026-86775
CVE-2026-86775 affects the knowns npm package (versions ≤ 0.29.1) with a path traversal vulnerability in the Document API. The root cause lies in cleanDocPath() in internal/server/routes/docs.go, which strips leading/trailing slashes and the .md suffix but fails to neutralize ../ sequences, and i...
ROOT-APP-NPM-GHSA-8X6C-CV3V-VP6G GHSA-8x6c-cv3v-vp6g in cacheable-request - Patched by Root
Root has patched GHSA-8x6c-cv3v-vp6g in the cacheable-request package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-73088 CVE-2026-73088 in browserslist - Patched by Root
Root has patched CVE-2026-73088 in the browserslist package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-23364 CVE-2021-23364 in browserslist - Patched by Root
Root has patched CVE-2021-23364 in the browserslist package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-0775 CVE-2026-0775 in npm - Patched by Root
Root has patched CVE-2026-0775 in the npm package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44000 CVE-2026-44000 in vm2 - Patched by Root
Root has patched CVE-2026-44000 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10839 AIKIDO-2026-10839 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10839 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47210 CVE-2026-47210 in vm2 - Patched by Root
Root has patched CVE-2026-47210 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10716 AIKIDO-2026-10716 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10716 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-43997 CVE-2026-43997 in vm2 - Patched by Root
Root has patched CVE-2026-43997 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10846 AIKIDO-2026-10846 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10846 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44006 CVE-2026-44006 in vm2 - Patched by Root
Root has patched CVE-2026-44006 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10847 AIKIDO-2026-10847 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10847 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44001 CVE-2026-44001 in vm2 - Patched by Root
Root has patched CVE-2026-44001 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-2CM2-M3W5-GP2F GHSA-2cm2-m3w5-gp2f in vm2 - Patched by Root
Root has patched GHSA-2cm2-m3w5-gp2f in the vm2 package for Root:npm. Multiple fixed versions available...