CVE-2026-75418: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in the built-in preview/development web server of Lektor 3.3.14 on Windows. An attacker with network access to the server can send a crafted HTTP request containing path traversal sequences to read arbitrary files accessible to the process, disclosing sensiti...

CVE-2026-75418

A path traversal vulnerability exists in the built-in preview/development web server of Lektor 3.3.14 on Windows. An attacker with network access to the server can send a crafted HTTP request containing path traversal sequences to read arbitrary files accessible to the process, disclosing sensiti...

CVE-2016-10561

Bitty (a development web server) is vulnerable to a directory traversal flaw in version 0.2.10, exploitable via the URL path in GET requests. The issue is documented across multiple connected records (GHSA, OSV, NVD/NPM advisory) as directory traversal in the bitty package. No concrete exploit de...