CVE-2026-27199-werkzeug-safe-join-bypass-PoC

CVE-2026-27199 PoC: Werkzeug safejoin Windows Device-Name Bypass Status: Publicly disclosed. Fixed in werkzeug 3.1.6. Severity: Moderate Reporter: @alimezar Advisory: GHSA-29vq-49wr-vm6x Affected Versions Package| Affected| Patched ---|---|--- werkzeug| Requires: Windows, Python 3.8+, werkzeug No...

CVE-2026-102598: Improper Handling of Windows Device Names

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

CVE-2026-27199

Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safejoin function allows Windows device names as filenames if preceded by other path segments. This was previously reported as GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact that...

Werkzeug security vulnerabilities

Werkzeug is a comprehensive WSGI web application library open-sourced by Pallets. A security vulnerability exists in Werkzeug versions prior to 3.1.4, which stems from improper handling of Windows device names by the safejoin function, which may result in file read hangs...

Megacubo 5.0.7 Injection Exploit

pwn...