EUVD-2026-95420

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction...

CVE-2026-56857

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction...

CVE-2026-56857

On Windows , the os package functions Root.Mkdir and Root.MkdirAll are vulnerable to a directory traversal-like behavior. When the target path ends in a junction pointing to an empty location (e.g., path/to/junction), the operation can create a directory at the junction target even if it resides ...