59236 matches found
CVE-2026-27598
CVE-2026-27598 affects Dagu up to version 1.16.7. The issue is in the CreateNewDAG API (POST /api/v1/dags) where DAG name validation is skipped before writing to the file store, allowing an authenticated user with DAG write permissions to write arbitrary YAML files on the filesystem. Since Dagu e...
CVE-2026-27598 Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory
Dagu is a workflow engine with a built-in Web user interface. In versions up to and including 1.16.7, the CreateNewDAG API endpoint POST /api/v1/dags does not validate the DAG name before passing it to the file store. An authenticated user with DAG write permissions can write arbitrary YAML files...
CVE-2026-27598 Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory
Dagu is a workflow engine with a built-in Web user interface. In versions up to and including 1.16.7, the CreateNewDAG API endpoint POST /api/v1/dags does not validate the DAG name before passing it to the file store. An authenticated user with DAG write permissions can write arbitrary YAML files...
CVE-2026-2785
creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:21+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c 2026-02-28 02:01:56+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o...
CVE-2026-2787
creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:21+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c 2026-02-26 13:17:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfrbs2azou2n 2026-02-28 02:01:57+00:00| seen|...
CVE-2026-2784
creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:21+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c 2026-02-28 02:01:56+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o...
CVE-2026-2777
creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:18+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevqoyme27 2026-02-28 02:01:54+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4yf4dfo2t...
CVE-2026-2771
creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:17+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevpneau2d 2026-02-28 02:01:51+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4ycvd6i2f...
CVE-2026-2766
creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:13+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevolwlj2h 2026-02-28 02:01:49+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4ybtzip2c 2026-03-01 00:27:17+00:00| seen|...
CVE-2026-2767
creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:13+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevolwlj2h 2026-02-28 02:01:50+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4ycvd6i2f...
CVE-2026-2762
creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:12+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevnkbfq2y 2026-02-28 02:01:49+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4ybtzip2c 2026-03-01 00:27:17+00:00| seen|...
PT-2026-21904
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow...
JetBrains TeamCity 输入验证错误漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools developed by the Czech company JetBrains. This tool offers features such as continuous unit testing, code quality analysis, and reporting on build issues. Versions of JetBrains TeamCity prior to 2025.11.3...
CVE-2026-25899
creationtimestamp| type| source ---|---|--- 2026-02-24 22:17:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn72vvqwp2s 2026-02-25 01:07:56+00:00| seen| https://gist.github.com/alon710/7f520ac338ee302e6bfcbcbe99b6a4cd 2026-02-25 04:49:18+00:00| seen|...
CVE-2026-26341
creationtimestamp| type| source ---|---|--- 2026-02-24 22:11:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn6qlap2e2e 2026-02-25 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfnjtkcze72r 2026-02-25 01:30:47+00:00| seen|...
CVE-2026-3131
creationtimestamp| type| source ---|---|--- 2026-02-24 21:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn5mri7pw2d...
Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory
The CreateNewDAG API endpoint POST /api/v1/dags does not validate the DAG name before passing it to the file store. While RenameDAG calls core.ValidateDAGName to reject names containing path separators line 273 in dags.go, CreateNewDAG skips this validation entirely and passes user input directly...
GHSA-6V48-FCQ6-FF23 Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory
The CreateNewDAG API endpoint POST /api/v1/dags does not validate the DAG name before passing it to the file store. While RenameDAG calls core.ValidateDAGName to reject names containing path separators line 273 in dags.go, CreateNewDAG skips this validation entirely and passes user input directly...
CVE-2026-27468
creationtimestamp| type| source ---|---|--- 2026-02-24 21:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn4jo7vli2e 2026-02-24 21:42:57+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3mfn54nc75g2n 2026-02-25 09:14:33+00:00| seen|...