CVE-2026-84421

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to remote code execution because of improper path validation during archive extraction . This flaw, categorized under CWE-22: Path Traversal , allows a remote authenticated attacker to execute arbitrary code. To remediate this vulnerabilit...

CVE-2026-84421 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction...

EUVD-2026-89197

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction...

CVE-2026-84421 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction...

RUSTSEC-2026-0317 A 512-byte workbook can provoke a multi-gigabyte allocation and abort the process

Affected versions passed caller-supplied bytes to calamine's Xlsx::new without first checking that they were a ZIP archive. Xlsx::new tests for password protection on its first line, which parses the input as an OLE/CFB container, and a sector-count field read from the file's own header reaches...

A 512-byte workbook can provoke a multi-gigabyte allocation and abort the process

Affected versions passed caller-supplied bytes to calamine's Xlsx::new without first checking that they were a ZIP archive. Xlsx::new tests for password protection on its first line, which parses the input as an OLE/CFB container, and a sector-count field read from the file's own header reaches...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR Archive Integrity Validator !Validator...

EUVD-2026-88565

Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs...

PT-2026-102798

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction...

Amazon Linux 2023 : gvfs, gvfs-archive, gvfs-client (ALAS2023-2026-3120)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3120 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the...

CVE-2026-84421: Improper Limitation of a Pathname to a Restricted Directory

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction...

Amazon Linux 2023 : runfinch-finch (ALAS2023-2026-3140)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3140 advisory. A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to acce...

Important: runfinch-finch

Issue Overview: A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

Amazon Linux 2 : runfinch-finch (ALASDOCKER-2026-142)

The version of runfinch-finch installed on the remote host is prior to 1.19.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-142 advisory. A custom client can produce such an upload request to the BuildKit daemon that files can escape from the...

Important: rclone

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

PT-2026-105971

Affected versions passed caller-supplied bytes to calamine's Xlsx::new without first checking that they were a ZIP archive. Xlsx::new tests for password protection on its first line, which parses the input as an OLE/CFB container, and a sector-count field read from the file's own header reaches...

SUSE CVE-2026-6103

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

CVE-2026-102332

Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs...

CVE-2026-102332

Dozzle versions prior to 11.1.2 are vulnerable to a path traversal flaw in the log download endpoint. The issue occurs because the software fails to sanitize container display names when constructing ZIP archive entry names. An attacker capable of labeling containers can inject path traversal seq...

CVE-2026-102332 Dozzle before 11.1.2 Path Traversal via Log ZIP Download

Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs...