EUVD-2026-91122

The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal. An attacker can inject path traversal sequences such as ..\ into the knowledgebasename parameter to write knowledge base content to arbitrary locations outside the...

EUVD-2026-91121

The /knowledgebase/uploadtempdocs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious filenames, an attacker can write files to arbitrary locations on the server, bypassing the intended restrictions on the temporary directory...

EUVD-2026-91123

The OpenAI-compatible file upload endpoint /v1/files in Langchain-Chatchat 0.3.0 is vulnerable to path traversal. An attacker can write files to arbitrary locations outside the openaifiles directory by crafting malicious filenames...

EUVD-2026-91125

deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce the tool layer to write or edit absolute paths outside the intended bot workspace...

EUVD-2026-91129

In Devika v1.0, the Feature Agent savecodetoproject function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace, potentially compromising the entire server...

EUVD-2026-91130

In Devika v1.0, the Patcher Agent savecodetoproject function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace...

EUVD-2009-5121

ContentKeeper Web Appliance now maintained by Impero Software versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts as t...

AZL-107954 CVE-2026-86345 affecting package 389-ds-base 3.1.1-12

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

UBUNTU-CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

PT-2026-111189

Affected files dulwich/index.py Methods: validate path element ntfs, tree to fs path dulwich/porcelain/ init .py Method: checked worktree path Description / Summary A High-severity Path Traversal vulnerability exists in Dulwich's checkout logic when running on Windows. The functions responsible f...

PT-2026-104135

Name of the Vulnerable Software and Affected Versions bc-csharp versions prior to 2.7.0 Description Improper certificate validation occurs in the PkixNameConstraintValidator specifically within the ExtractHostFromURL function. This issue allows a name-constrained subordinate CA, or an entity...

PT-2026-104123

Name of the Vulnerable Software and Affected Versions bc-csharp versions prior to 2.7.0 Description Improper certificate validation occurs in the PkixNameConstraintValidator function. An attacker controlling a name-constrained intermediate CA can cause certificates to be accepted during PKIX...

PT-2026-104330

Name of the Vulnerable Software and Affected Versions Logback-classic versions 0.9.14 through 1.6.4 Description A path-traversal issue exists in the logback-classic module. An MDC-based discriminator value is passed unsanitized into a nested FileAppender path. An attacker who can influence this M...

PT-2026-104228

Name of the Vulnerable Software and Affected Versions Ghost versions 1.20.0 through 6.63.x Description A path traversal issue exists in the theme translation file loading process. This allows authenticated administrators to read JSON files located outside the active theme directory by manipulatin...

CVE-2026-51906

In TaskingAI v0.3.0 in the DALL-E 3 image generation tool saveurlimage function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the projectid parameter...

CVE-2026-51907

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

EUVD-2026-91700

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

EUVD-2026-91701

In TaskingAI v0.3.0 in the DALL-E 3 image generation tool saveurlimage function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the projectid parameter...

PT-2026-104366

Name of the Vulnerable Software and Affected Versions TaskingAI version 0.3.0 Description In the DALL-E 3 image generation tool, the save url image function contains a path traversal flaw. This allows attackers to write downloaded images to arbitrary locations on the server filesystem by...

PT-2026-104357

Name of the Vulnerable Software and Affected Versions uv versions 0.12.7 through 0.12.17 Description On Windows, the wheel extraction process can be manipulated by a malicious wheel to write files outside the intended installation prefix. This allows for the placement of an executable file into a...