133295 matches found
GO-2026-6207 Traefik: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass in github.com/traefik/traefik
Traefik: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass in github.com/traefik/traefik...
GO-2026-6097 Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account in github.com/cloudreve/Cloudreve
Cloudreve: Path Traversal in WOPI PUTRELATIVE Allows Arbitrary File Creation in Owner Account in github.com/cloudreve/Cloudreve...
GO-2026-6109 OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList
OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList...
GO-2026-6110 OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList
OpenList: Authenticated users can rename files outside their base path via batch rename srcname traversal in github.com/OpenListTeam/OpenList...
GO-2026-6208 Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware in github.com/traefik/traefik
Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware in github.com/traefik/traefik...
GO-2026-6247 uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability in gitlab.com/uniget-org/cli
uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability in gitlab.com/uniget-org/cli...
GO-2026-6134 goshs has ACL Bypass & Path Traversal in github.com/patrickhener/goshs
goshs has ACL Bypass & Path Traversal in github.com/patrickhener/goshs...
CVE-2026-45532
DataEase is an open source data visualization and analysis tool. Versions prior to 2.10.23 have a path traversal vulnerability. The root cause is that on Windows, the FILESEPARATOR is , while the server only filters the / character during string truncation. The vulnerability has been fixed in...
CVE-2026-18751
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607...
CVE-2026-45532
DataEase versions prior to 2.10.23 on Windows have a path traversal flaw: the server only filters /, allowing attackers to traverse directories via \. The fix is in v2.10.23; no workarounds exist. CVSS 4.0 scores 8.7 (HIGH) with network access and no authentication required. No exploitation detai...
EUVD-2026-60760
DataEase is an open source data visualization and analysis tool. Versions prior to 2.10.23 have a path traversal vulnerability. The root cause is that on Windows, the FILESEPARATOR is , while the server only filters the / character during string truncation. The vulnerability has been fixed in...
CVE-2026-45532 DataEase has a Path Traversal Vulnerability
DataEase is an open source data visualization and analysis tool. Versions prior to 2.10.23 have a path traversal vulnerability. The root cause is that on Windows, the FILESEPARATOR is , while the server only filters the / character during string truncation. The vulnerability has been fixed in...
CVE-2026-45532 DataEase has a Path Traversal Vulnerability
DataEase is an open source data visualization and analysis tool. Versions prior to 2.10.23 have a path traversal vulnerability. The root cause is that on Windows, the FILESEPARATOR is , while the server only filters the / character during string truncation. The vulnerability has been fixed in...
CVE-2026-45532 DataEase has a Path Traversal Vulnerability
DataEase is an open source data visualization and analysis tool. Versions prior to 2.10.23 have a path traversal vulnerability. The root cause is that on Windows, the FILESEPARATOR is , while the server only filters the / character during string truncation. The vulnerability has been fixed in...
attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr
A flaw was found in the attr package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by getfattr or during backup restoration by setfattr, which reads and resolve...
Duplicate Advisory: Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4v9q-p283-qc2m. This link is maintained to preserve external references. Original Description Grav before 2.0.15 contains a path traversal vulnerability in the static asset server within index.php that uses stri...
CVE-2026-18751 Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607...
CVE-2026-18751 Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607...
CVE-2026-18751
Citrix Workspace App for Mac (versions before 2607 ) is affected by an external control of file name or path vulnerability (CWE-73). If exploited, it allows arbitrary root file modification , enabling privilege escalation from a local authenticated user to root. The attacker must already have loc...