CVE-2026-27199-werkzeug-safe-join-bypass-PoC

CVE-2026-27199 PoC: Werkzeug safejoin Windows デバイス名バイパス ステータス: 公開済み。werkzeug 3.1.6 で修正済み。 深刻度: 中 Moderate 報告者: @alimezar アドバイザリ: GHSA-29vq-49wr-vm6x 影響を受けるバージョン...

CVE-2026-27199

Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safejoin function allows Windows device names as filenames if preceded by other path segments. This was previously reported as GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact that...

Werkzeug 安全漏洞

Werkzeug is a comprehensive WSGI web application library open-sourced by Pallets. A security vulnerability exists in Werkzeug versions prior to 3.1.4, which stems from improper handling of Windows device names by the safejoin function, which may result in file read hangs...

Megacubo 5.0.7 Injection Exploit

pwn...