com.braimanm:uitaf (>=3.0.0, <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha, <=1.0.1-alpha) +5 more potentially affected by CVE-2026-55846 via io.qameta.allure:allure-commandline (>=2.13.8, <=2.36.0)

io.qameta.allure:allure-commandline MAVEN version =2.13.8, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-rc1, =1.1.6 - org.uitaf:uitaf-playwright 1.0.1 Source cves: CVE-2026-55846 Source advisory: MEND:CVE-2026-55846...

com.braimanm:uitaf (>=3.0.0, <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha, <=1.0.1-alpha) +7 more potentially affected by CVE-2026-55847 via io.qameta.allure:allure-generator (>=2.8.0, <=2.38.1)

io.qameta.allure:allure-generator MAVEN version =2.8.0, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-rc1, =2.8.0, =2.38.1 - org.uitaf:uitaf-playwright 1.0.1 Source cves: CVE-2026-55847 Source advisory: OSV:GHSA-GX93-M64W-5M6H...

Allure Report: Path Traversal in HTTP Server Allows Arbitrary File Read

Summary The built-in HTTP server started by allure serve and allure open is vulnerable to path traversal. The server resolves request URI paths directly against the report directory without normalizing or validating that the resolved path stays within the report directory. An attacker who can rea...

com.braimanm:uitaf (>=3.0.0, <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha, <=1.0.1-alpha) +5 more potentially affected by CVE-2026-55846 via io.qameta.allure:allure-commandline (>=2.13.8, <=2.36.0)

io.qameta.allure:allure-commandline MAVEN version =2.13.8, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-rc1, =1.1.6 - org.uitaf:uitaf-playwright 1.0.1 Source cves: CVE-2026-55846 Source advisory: GHSA-82CG-3HV7-74GC...

com.braimanm:uitaf (>=3.0.0, <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha, <=1.0.1-alpha) +5 more potentially affected by CVE-2026-55846 via io.qameta.allure:allure-commandline (>=2.13.8, <=2.36.0)

io.qameta.allure:allure-commandline MAVEN version =2.13.8, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-rc1, =1.1.6 - org.uitaf:uitaf-playwright 1.0.1 Source cves: CVE-2026-55846 Source advisory: SNYK:JAVA-IOQAMETAALLURE-17732805...

com.braimanm:uitaf (>=3.0.0, <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha, <=1.0.1-alpha) +5 more potentially affected by CVE-2026-55846 via io.qameta.allure:allure-commandline (>=2.13.8, <=2.36.0)

io.qameta.allure:allure-commandline MAVEN version =2.13.8, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-rc1, =1.1.6 - org.uitaf:uitaf-playwright 1.0.1 Source cves: CVE-2026-55846 Source advisory: OSV:GHSA-82CG-3HV7-74GC...