2656 matches found
CVE-2026-44017
CVE-2026-44017 concerns Docling’s EasyOCR model download: prior to 2.91.0, ZIP archives were extracted without validating member paths, enabling Zip Slip path traversal. An attacker who could supply or intercept the model source could overwrite files anywhere writable by the process, potentially ...
CVE-2026-44017 Docling: Unsafe Zip Extraction in EasyOCR Model Download
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...
CVE-2026-44017 Docling: Unsafe Zip Extraction in EasyOCR Model Download
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the exwsAllocate process. An attacker can access arbitrary files on the controller file system and potentially execute code by supplying specially crafted path traversal sequences. Details A Directory Traversal...
CVE-2026-44017: Improper Limitation of a Pathname to a Restricted Directory
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the getmediapath function. An attacker can access arbitrary files on the filesystem by supplying an absolute path as the filename parameter, which causes the application to bypass directory restrictions and serve...
Directory Traversal
Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Directory Traversal via the Clone or Push operations in the Git node when a local filesystem path is supplied as the source or target repository, bypassing the intended file sandbox. An attacker can...
Directory Traversal
Overview Glances is an A cross-platform curses-based monitoring tool Affected versions of this package are vulnerable to Directory Traversal through the securepopen process. An attacker can write arbitrary files, execute arbitrary commands, or exfiltrate data by modifying configuration values to...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the handler/router.go process. An attacker can access arbitrary files on the host filesystem by sending requests with percent-encoded backslashes %5C that bypass path sanitization. Details A Directory Traversal...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the handler/router.go process. An attacker can access arbitrary files on the host filesystem by sending requests with percent-encoded backslashes %5C that bypass path sanitization. Details A Directory Traversal...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the handler/router.go process. An attacker can access arbitrary files on the host filesystem by sending requests with percent-encoded backslashes %5C that bypass path sanitization. Details A Directory Traversal...
Directory Traversal
Overview github.com/containers/buildah/imagebuildah is a tool that facilitates building OCI images. Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended build context by serving a malicious Git repository or tar archive, potentially...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended build context by serving a malicious Git repository or tar archive, potentially...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended build context by serving a malicious Git repository or tar archive, potentially...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended build context by serving a malicious Git repository or tar archive, potentially...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended build context by serving a malicious Git repository or tar archive, potentially...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended build context by serving a malicious Git repository or tar archive, potentially...
Directory Traversal
Overview go.podman.io/buildah/imagebuildah is a tool that facilitates building OCI images. Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended build context by serving a malicious Git repository or tar archive, potentially...