1618 matches found
CVE-2026-100633
SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard util.IsForbiddenAbsPath, invoked from resolvePath is applied only to the allowed root of recursive operations and not to each resolved descendant path — an...
CVE-2026-100633 SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations
SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard util.IsForbiddenAbsPath, invoked from resolvePath is applied only to the allowed root of recursive operations and not to each resolved descendant path — an...
CVE-2026-100633 SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations
SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard util.IsForbiddenAbsPath, invoked from resolvePath is applied only to the allowed root of recursive operations and not to each resolved descendant path — an...
CVE-2026-100633
The SiYuan personal knowledge management system (versions 3.8.0 through 3.8.3 ) contains a sensitive-path guard bypass in the MCP file tool . The root cause is that the util.IsForbiddenAbsPath() check (invoked via resolvePath()) is only applied to the root of recursive operations rather than each...
PT-2026-99304
Name of the Vulnerable Software and Affected Versions SiYuan versions 3.8.0 through 3.8.3 Description An authenticated administrator using the in-app Agent or the external MCP server can bypass the protected-workspace-file denylist. This occurs because the sensitive-path guard...
RUSTSEC-2026-0296 `unzip` is unmaintained
The unzip crate has only ever released a single version, 0.1.0 published 2017-12-23, and has seen no further activity. It appears to be unmaintained, and its known path-traversal "zip-slip" vulnerability will not be fixed. Consider migrating to an actively maintained alternative such as zip...
`unzip` is unmaintained
The unzip crate has only ever released a single version, 0.1.0 published 2017-12-23, and has seen no further activity. It appears to be unmaintained, and its known path-traversal "zip-slip" vulnerability will not be fixed. Consider migrating to an actively maintained alternative such as zip...
benchmark_sampledata (>=0.1.0, <=0.1.5), dircpy (>=0.2.1, <=0.3.17) +6 more potentially affected by unknown CVE via unzip (0.1.0)
unzip CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on unzip and may be impacted: - benchmarksampledata =0.1.0, =0.2.1, =0.1.5, =0.1.0, =0.3.0, =0.3.0, =0.3.4, =0.3.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0296...
PT-2026-105965
The unzip crate has only ever released a single version, 0.1.0 published 2017-12-23, and has seen no further activity. It appears to be unmaintained, and its known path-traversal "zip-slip" vulnerability will not be fixed. Consider migrating to an actively maintained alternative such as zip...
PT-2026-95068
Summary The decompression-bomb bound added in 2.0.1 commit 1c1003c sums ZipArchive::statIndex$i'size' and rejects an archive whose declared uncompressed total exceeds system.gpm.archive.max uncompressed size default 1 GiB before extracting ZipArchiver.php:77-86; same logic in GPMInstaller::unZip ...
GHSA-2VCX-H8P2-9PG9 Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()
Summary An authenticated admin.super user can crash Grav or fill the disk by uploading a specially crafted ZIP archive through the Direct Install tool. The method Installer::unZip calls ZipArchive::extractTo without any limit on uncompressed size, entry count, or directory depth, enabling Zip Bom...
EUVD-2026-42951
Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip...
Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()
Summary An authenticated admin.super user can crash Grav or fill the disk by uploading a specially crafted ZIP archive through the Direct Install tool. The method Installer::unZip calls ZipArchive::extractTo without any limit on uncompressed size, entry count, or directory depth, enabling Zip Bom...
CVE-2026-59974 Stanza: Zip Slip Path Traversal in Model/Resource Extraction
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating...
Updated unzip packages fix security vulnerabilities
Vulnerabilities were discovered in the Info-ZIP unzip program, which could result in the execution of arbitrary code if a specially crafted file is processed...
MGASA-2026-0405 Updated unzip packages fix security vulnerabilities
Vulnerabilities were discovered in the Info-ZIP unzip program, which could result in the execution of arbitrary code if a specially crafted file is processed...
Astra Linux – Vulnerability in unzip
A flaw was discovered in Unzip. The vulnerability occurs during the conversion of a wide string to a local string, resulting in an out-of-bound write operation on the heap. This flaw allows an attacker to submit a specially crafted zip file, causing a crash or code execution...
Astra Linux – Vulnerability in unzip
A flaw was discovered in unzip. The vulnerability arises from improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to submit a specially crafted zip file, resulting in a crash or code execution...
Astra Linux – Vulnerability in unzip
A flaw was discovered in Unzip. The vulnerability occurs during the conversion of a wide string to a local string, resulting in an out-of-bound write operation on the heap. This flaw allows an attacker to submit a specially crafted zip file, causing a crash or code execution...