CVE-2026-108854

Wanwu versions prior to 0.6.3 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability. An authenticated enabled user can delete other users' legacy AppKeys by providing a numeric apiId to the DELETE /v1/appspace/app/key endpoint. This flaw allows attackers to iterate sequential...

EUVD-2021-10427

Malware in sbrugna...

Directory traversal

All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is able to delete arbitrary JSON files on the disk where Tyk is running via the management API. The APIID is provided by the user and this valu...

CVE-2021-23357 Directory Traversal

All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is able to delete arbitrary JSON files on the disk where Tyk is running via the management API. The APIID is provided by the user and this valu...