Lucene search
+L

3 matches found

NVD
NVD
•added 2026/08/05 8:16 a.m.•17 views

CVE-2026-71215

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

7.5CVSS0.00558EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/05 6:59 a.m.•20 views

EUVD-2026-53212

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root. Because path.resolve discards ro...

7.5CVSS6AI score0.00558EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/07/24 12:00 a.m.•16 views

PT-2021-5756

Name of the Vulnerable Software and Affected Versions node-tar versions prior to 3.3.2, 4.4.14, 5.0.6, and 6.1.1 Description The issue is related to the node-tar module for handling tar archives in Node.js, which has a problem with incorrect filtering of the '/' character sequence. This could all...

8.2CVSS7AI score0.15133EPSS
SaveExploits1References99
Rows per page
Query Builder