Lucene search
+L

524 matches found

Cvelist
Cvelist
added 2026/03/07 3:32 p.m.55 views

CVE-2026-29786 node-tar: Hardlink Path Traversal via Drive-Relative Linkpath

node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-relative link target such as C:../target.txt, which enables file overwrite outside cwd during normal tar.x extraction. Th...

8.2CVSS0.00439EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2026/03/05 1:57 a.m.9 views

CVE-2026-27905

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path,...

8.6CVSS6.1AI score0.00257EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/03/05 12:00 a.m.6 views

Zed < 0.224.4 Multiple Path Traversal Vulnerabilities

The version of Zed installed on the remote host is prior to 0.224.4. It is, therefore, affected by multiple vulnerabilities: - A Zip Slip path traversal vulnerability exists in the extension archive extraction functionality. The extractzip function fails to validate ZIP entry filenames for path...

8.8CVSS6.2AI score0.0049EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2026/03/05 12:00 a.m.10 views

BentoML < 1.4.36 Arbitrary File Write

The version of the BentoML library installed on the remote host is prior to 1.4.36. It is, therefore, affected by an arbitrary file write vulnerability: - The safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only...

8.6CVSS5.9AI score0.00257EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/03/05 12:00 a.m.10 views

Unity Linux 20.1050a Security Update: python-pip (UTSA-2026-005680)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005680 advisory. When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgradi...

5.9CVSS5.8AI score0.00469EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/03/04 12:28 a.m.9 views

SUSE CVE-2026-23644

esm.sh is a no-build content delivery network CDN for web development. Prior to Go pseeudoversion 0.0.0-20260116051925-c62ab83c589e, the software has a path traversal vulnerability due to an incomplete fix. path.Clean normalizes a path but does not prevent absolute paths in a malicious tar file...

8.7CVSS5.8AI score0.00496EPSS
SaveExploits1References3
NVD
NVD
added 2026/03/03 11:15 p.m.16 views

CVE-2026-27905

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path,...

8.6CVSS0.00257EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/03/03 10:45 p.m.12 views

EUVD-2026-9343

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path,...

8.6CVSS6.1AI score0.00257EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/03/03 10:45 p.m.31 views

CVE-2026-27905 BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar Extraction

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path,...

8.6CVSS0.00257EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/03 10:45 p.m.8 views

CVE-2026-27905

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path,...

8.6CVSS6.1AI score0.00257EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/03 10:45 p.m.5 views

CVE-2026-27905 BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar Extraction

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path,...

8.6CVSS6.1AI score0.00257EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/03 10:45 p.m.46 views

CVE-2026-27905

CVE-2026-27905 affects BentoML prior to 1.4.36. The safe_extract_tarfile() path validation checks only the symlink’s own path, not the symlink’s target, enabling an attacker to craft a tar with a symlink pointing outside the extraction directory followed by a regular file that writes via the syml...

8.6CVSS6.1AI score0.00257EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/03/03 10:45 p.m.10 views

CVE-2026-27905 BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar Extraction

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path,...

8.6CVSS6AI score
SaveExploits0References4
OSV
OSV
added 2026/03/03 5:46 p.m.14 views

GHSA-M6W7-QV66-G3MF BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction

Arbitrary File Write via Symlink Path Traversal in Tar Extraction Summary The safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path, not the symlink's target. An attacker can create a...

8.6CVSS6.5AI score0.00257EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/03/03 5:46 p.m.17 views

BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction

Arbitrary File Write via Symlink Path Traversal in Tar Extraction Summary The safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path, not the symlink's target. An attacker can create a...

8.6CVSS6.5AI score0.00257EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/03 12:00 a.m.14 views

PT-2026-22843

Name of the Vulnerable Software and Affected Versions BentoML versions prior to 1.4.36 Description BentoML, a Python library used for building online serving systems for AI applications, contains a flaw in the safe extract tarfile function. This function inadequately validates symlink targets...

8.6CVSS6.3AI score0.00257EPSS
SaveExploits1References15
Broadcom
Broadcom
added 2026/03/03 12:00 a.m.24 views

Pip Vulnerable to Path Traversal via Lack of Symbolic Link Validation in 'unpacking.py‎' File

Pip is vulnerable to path traversal due to a lack of validation for symbolic links when Pip is used with instances of python which do not implement PEP 706. This could allow a remote attacker to extract a tar file outside of the intended directory...

5.9CVSS6AI score0.00469EPSS
SaveExploits0
OSV
OSV
added 2026/03/02 10:40 p.m.17 views

GHSA-P25H-9Q54-FFVW OpenClaw has Zip Slip path traversal in tar archive extraction

Summary OpenClaw versions before 2026.2.14 did not sufficiently validate TAR archive entry paths during extraction. A crafted archive could use path traversal sequences for example ../../... to write files outside the intended destination directory Zip Slip. Affected Packages / Versions - Package...

8.3CVSS6AI score0.00409EPSS
SaveExploits0References5
OSV
OSV
added 2026/03/01 1:28 a.m.38 views

GHSA-6RXQ-Q92G-4RMF kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories

kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A tar entry like ../outside.txt escapes the extraction root and writes files outside the destination directory. In environments with registry authentication, this ca...

8.2CVSS6.3AI score0.00613EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/03/01 1:28 a.m.25 views

kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories

kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A tar entry like ../outside.txt escapes the extraction root and writes files outside the destination directory. In environments with registry authentication, this ca...

8.5CVSS6.3AI score0.00613EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder