CVE-2026-55840

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with Strings.CI.startsWith against the configured server URL. An attacker can supply an absolu...

PT-2026-83662

The issue is that the function normalizes the URI path before percent decoding it: OCaml let resolve local file docroot uri = let path = Uri.pct decode path resolve "http" of string "/" uri in ... Because %2f is decoded after Uri.resolve, encoded separators survive dot-segment normalization. For...