EUVD-2026-66225

Trestle is vulnerable to arbitrary file write via path traversal in author generate commands Incomplete fix of CVE-2026-46345...

GHSA-R4VP-3VW6-R2X5 Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)

At a glance - Actor: attacker who controls the -o/--output argument to trestle author catalog,profile,ssp-generate e.g. via a CI pipeline that derives the output directory from repository-controlled data - Primitive: attacker-controlled --output value reaches trestleroot / args.output write sink...

Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)

At a glance - Actor: attacker who controls the -o/--output argument to trestle author catalog,profile,ssp-generate e.g. via a CI pipeline that derives the output directory from repository-controlled data - Primitive: attacker-controlled --output value reaches trestleroot / args.output write sink...

langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs

Summary langchain-nvidia-ai-endpoints versions before 1.4.2 accepted local filesystem paths as image inputs for Vision Language Model VLM requests. If an application passed attacker-controlled image input to ChatNVIDIA or VLM reranking APIs, an attacker could cause files readable by the applicati...

CVE-2026-97323

A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOriginalFilename of the file yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.java of the component File Upload. Executing a manipulation...

CVE-2026-48072

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments and resolves them against local storage without confinement to the intended image directory. An unauthenticated...

CVE-2026-97323 YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal

A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOriginalFilename of the file yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.java of the component File Upload. Executing a manipulation...

CVE-2026-97323 YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal

A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOriginalFilename of the file yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.java of the component File Upload. Executing a manipulation...

CVE-2026-97323

A path traversal vulnerability exists in the File Upload component of YunaiV/zhijiantianya ruoyi-vue-pro (up to version 2026.08). The flaw resides in the getOriginalFilename function within the file yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.ja...

EUVD-2026-86405

A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOriginalFilename of the file yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.java of the component File Upload. Executing a manipulation...

WordPress SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Administrator+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin SSL Zen versions = 4.7.42...

EUVD-2026-86389

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments and resolves them against local storage without confinement to the intended image directory. An unauthenticated...

CVE-2026-48072 Docmost: Public image fileName path traversal leads to unauthorized local file read

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments and resolves them against local storage without confinement to the intended image directory. An unauthenticated...

CVE-2026-48072

Docmost , an open-source collaborative wiki and documentation software, is vulnerable to a path traversal flaw in versions prior to 0.80.1 . The public avatar and logo image endpoints fail to confine file path segments to the intended directory, allowing an unauthenticated attacker to traverse ou...

CVE-2026-48072 Docmost: Public image fileName path traversal leads to unauthorized local file read

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments and resolves them against local storage without confinement to the intended image directory. An unauthenticated...

CVE-2026-48072 Docmost: Public image fileName path traversal leads to unauthorized local file read

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments and resolves them against local storage without confinement to the intended image directory. An unauthenticated...

CVE-2026-97232

A vulnerability was determined in volotat Anagnorisis up to 0.4.2. Affected by this vulnerability is the function getfilecontent/savefilecontent/movefiles/startstreaming of the file page.html. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been...

CVE-2026-48070 Docmost: Avatar URL path traversal in avatar cleanup leads to arbitrary local file deletion

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, authenticated users can store attacker-controlled avatarUrl values that are later reused by avatar cleanup without confinement to the intended directory on local-storage deployments. A low-privileged user can...

CVE-2026-48070 Docmost: Avatar URL path traversal in avatar cleanup leads to arbitrary local file deletion

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, authenticated users can store attacker-controlled avatarUrl values that are later reused by avatar cleanup without confinement to the intended directory on local-storage deployments. A low-privileged user can...

CVE-2026-48070

The open-source wiki software Docmost (prior to version 0.80.1 ) is vulnerable to an avatar URL path traversal flaw. Authenticated users can store attacker-controlled avatarUrl values which are subsequently processed by the avatar cleanup function without proper directory confinement on local-sto...