Directory Traversal

Overview org.webjars.npm:art-template is a simple and superfast templating engine that optimizes template rendering speed by scope pre-declared technique, hence achieving runtime performance which is close to the limits of JavaScript. At the same time, it supports both NodeJS and browser. Affecte...

CVE-2026-71215

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

CVE-2026-71215 art-template - Path Traversal in Sub-Template Resolution via include()/extend()

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

CVE-2026-71215

CVE-2026-71215 affects art-template. Sub-template resolution (resolve-filename.js) resolves target file paths using path.resolve(root, filename) without validating the resulting path is inside root, allowing traversal via include()/extend() and passing the path to fs.readFileSync. An attacker can...

CVE-2026-71215

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root. Because path.resolve discards ro...

CVE-2026-71215 art-template - Path Traversal in Sub-Template Resolution via include()/extend()

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

CVE-2026-71215: Improper Limitation of a Pathname to a Restricted Directory

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

PT-2026-68053

Name of the Vulnerable Software and Affected Versions art-template affected versions not specified Description Sub-template resolution logic in src/compile/adapter/resolve-filename.js, utilized by the include and extend template directives, fails to verify if the resolved file path remains within...

CLSA-2026-1774484512 TuxCare security update for deep-extend (1 CVE)

TuxCare rebuilt deep-extend to address 1 CVE. Fixed in 0.4.2-tuxcare.1...

CLSA-2026-1774138774 TuxCare security update for deep-extend (1 CVE)

TuxCare rebuilt deep-extend to address 1 CVE. Fixed in 0.2.11-tuxcare.1...

CLSA-2026-1773188141 TuxCare security update for extend (1 CVE)

TuxCare rebuilt extend to address 1 CVE. Fixed in 3.0.0-tuxcare.3...

CLSA-2026-1771891821 TuxCare security update for utils-extend (2 CVEs)

TuxCare rebuilt utils-extend to address 2 CVEs. Fixed in 1.0.8-tuxcare.1...

PT-2026-73783

TuxCare rebuilt utils-extend to address 2 CVEs. Fixed in 1.0.8-tuxcare.1...

PT-2026-73937

TuxCare rebuilt extend to address 1 CVE. Fixed in 3.0.0-tuxcare.3...

PT-2026-74056

TuxCare rebuilt deep-extend to address 1 CVE. Fixed in 0.2.11-tuxcare.1...

PT-2026-74140

TuxCare rebuilt deep-extend to address 1 CVE. Fixed in 0.4.2-tuxcare.1...

CVE-2026-18203 Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes

A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend permissions to child groups, the system incorrectly uses a simple text-based prefix check to verify group membership. This allows a user who belongs ...

CVE-2026-64297

A flaw was found in the Linux kernel. An unchecked return value in the moduleextendmaxpages function within the module decompression logic can lead to a null pointer dereference. This vulnerability can be triggered if memory allocation fails during module loading, resulting in a kernel oops. This...

SUSE CVE-2026-64297

In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...

CVE-2026-64297 module: decompress: check return value of module_extend_max_pages()

In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...