CVE-2026-65063

Data::RadixTree::Shared prior to 0.02 for Perl creates a world-readable mmap backing file via open(path, O_RDWR|O_CREAT, 0666) in radix.h. With default umask 022, the resulting mode is 0644, making the file world-readable. O_NOFOLLOW is not used, so a symlink at the path is followed; O_EXCL is no...

CVE-2026-64615

Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in graph.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64613 Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW

Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without ONOFOLLOW. The segment is created in bufgeneric.h with openpath, ORDWR|OCREAT|OEXCL, 0666. OEXCL blocks a pre-seeded file on create, but the mode is 0666, so under the default umask 02...

CVE-2026-64613

Data::Buffer::Shared for Perl versions before 0.05 is affected. A world-readable mmap backing file is created (mode 0666 then 0644 by default umask) and opened with open(path, O_RDWR|O_CREAT|O_EXCL) without O_NOFOLLOW. A pre-planted symlink at the path can be followed, allowing local users to rea...

Directory Traversal

Overview @hono/node-server is a Node.js Adapter for Hono Affected versions of this package are vulnerable to Directory Traversal in the serve-static on Windows hosts when an encoded backslash %5C in the request path is decoded to , which the Windows path resolver treats as a separator. This allow...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the backup-restore process. An attacker can overwrite arbitrary files on the filesystem by supplying a crafted tar archive containing a symbolic link with a benign member name and an absolute linkname pointing...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the file-op delete path. An attacker can delete files outside the intended build root by sending a crafted low-level build API request with FileActionRm.Path values such as .. or ../victim. The vulnerable path...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the local sources upload handling of the BuildKit daemon, which does not neutralize path elements in uploaded file destinations that resolve outside the daemon's state directory. A user with access to the BuildKit...

CVE-2026-15791

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

CVE-2026-15789

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

CVE-2026-28305

SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to remote code execution as root. A domain account with admin privileges and read and write access to the home directory is required. The impact is lower in Windows deployments...

EUVD-2026-46309

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

CVE-2026-15789 Malicious client can bypass destination directory validation on local sources upload

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

CVE-2026-15791

CVE-2026-15791 concerns BuildKit LLB/file operations where a crafted low-level build API message can escape the build root and remove contents of the host’s /tmp directory. Technical details across sources describe a Directory Traversal in the file operation (FileActionRm.Path) that can lead to h...

CVE-2026-15791 LLB file operation can be tricked to remove /tmp directory contents

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

CVE-2026-15791

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

CVE-2026-15791 LLB file operation can be tricked to remove /tmp directory contents

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

CVE-2026-15789 Malicious client can bypass destination directory validation on local sources upload

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

CVE-2026-15791 LLB file operation can be tricked to remove /tmp directory contents

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

CVE-2026-15789

CVE-2026-15789 affects the BuildKit daemon: a custom client with valid BuildKit API access can craft upload requests that bypass destination directory validation, allowing files to escape the BuildKit-controlled state directory. This is a local-privilege issue that requires access to the BuildKit...