Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the file reading process for PRX or STX files. An attacker can cause files to be written to arbitrary locations on the file system by supplying a specially crafted file. Workaround This vulnerability can be...

Directory Traversal

Overview @fastify/http-proxy is a proxy http requests, for Fastify Affected versions of this package are vulnerable to Directory Traversal via the WebSocket routing. An attacker can access unintended upstream endpoints by sending crafted WebSocket upgrade requests containing path traversal...

Directory Traversal

Overview proot-distro is a PRoot-Distro is a lightweight rootless Linux container management utility built around proot. Affected versions of this package are vulnerable to Directory Traversal via the copy command. An attacker can read or overwrite files outside the intended container root...

Directory Traversal

Overview prompty is a Prompty is a new asset class and format for LLM prompts that aims to provide observability, understandability, and portability for developers. It includes spec, tooling, and a runtime. This Prompty runtime supports Python Affected versions of this package are vulnerable to...

Directory Traversal

Overview @prompty/core is a Prompty core package Affected versions of this package are vulnerable to Directory Traversal via the file reference expansion process. An attacker can access arbitrary files available to the application process by supplying a specially crafted .prompty file containing...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the file reference expansion process. An attacker can access arbitrary files available to the application process by supplying a specially crafted .prompty file containing $file:... references that use path...

Directory Traversal

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Directory Traversal via the exec allowlist glob matching. An attacker can gain unauthorized access to restricted actions by crafting input paths that traverse allowlist glob patterns...

Notepad++ < 8.9.7 Multiple Vulnerabilities

The version of Notepad++ installed on the remote host is prior to 8.9.7. It is, therefore, affected by multiple vulnerabilities: - A security bypass vulnerability exists in session.xml backupFilePath handling due to an incomplete startswith check. An attacker could exploit this to bypass path...

Directory Traversal

Overview github.com/filebrowser/filebrowser/v2/http is a web file browser. Affected versions of this package are vulnerable to Directory Traversal in the archive builder process. An attacker can write files outside the intended extraction directory by uploading a file with a specially crafted...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the configdirs directive. An attacker can gain unauthorized read and write access to files outside of the intended secure directory by manipulating the configuration. This is only exploitable if the configdirs...

CVE-2026-62843 File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Browser's archive builder uses strings.ReplaceAllnameInArchive, "", "/", which turns a POSIX filename such as ....\evil.sh into the...

CVE-2026-62843 File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Browser's archive builder uses strings.ReplaceAllnameInArchive, "", "/", which turns a POSIX filename such as ....\evil.sh into the...

CVE-2026-62843

CVE-2026-62843 affects File Browser (versions 2.63.6–2.63.16). The archive builder calls strings.ReplaceAll(nameInArchive, "\", "/"), which can transform a POSIX filename like ..\..\evil.sh into ../../evil.sh within the generated zip/tar. This enables a user with upload permissions to place a bac...

CVE-2026-62843 File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Browser's archive builder uses strings.ReplaceAllnameInArchive, "", "/", which turns a POSIX filename such as ....\evil.sh into the...

Directory Traversal

Overview praisonaiagents is a Praison AI agents for completing complex tasks with Self Reflection Agents Affected versions of this package are vulnerable to Directory Traversal via the runskillscript function. An attacker can execute arbitrary scripts from any location on the filesystem by...

CVE-2026-43637 Cornac < 2.6.0 Path Traversal via _extract_archive() in download.py

Cornac before 2.6.0 contains a path traversal Tar Slip vulnerability that allows attackers to write arbitrary files outside the intended cache directory by supplying a crafted TAR archive containing ../ sequences, absolute paths, or symlink/hardlink entries to the extractarchive function in...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through the handling of XAPK archive entries with absolute paths in the XApkLoader file. An attacker can achieve arbitrary code execution by crafting a malicious .xapk file that causes files to be written outside the...

PT-2026-58887

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description The expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a variable name located between $ and into a fixed-size wchar t strMAX PATH stack buffer...

PT-2026-58888

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description The decompress function in WinGup fails to perform canonical containment validation when joining untrusted ZIP entry names to unzipDestTo. This allows a specially crafted ZIP entry, such as...

PT-2026-58886

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description Notepad++ fails to perform path normalization when validating the backupFilePath attribute from session.xml using the std::wstring::starts with function. This allows the use of parent-directory...