EUVD-2026-119770

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the component S3 Destination Configuration Handler. Such manipulation of the argument BucketARN leads t...

CVE-2026-124509

A path traversal vulnerability exists in floci-io Floci versions up to 2.1.0 within the S3 Destination Configuration Handler component. The root cause is improper handling of the BucketARN argument in the S3Destination.bucketName function located in services/firehose/model/DeliveryStreamDescripti...

CVE-2026-124508

The floci-io Floci tool (versions up to 2.4.0 ) is vulnerable to a remote path traversal vulnerability in the Artifact Handler component. The root cause is located in the BuildspecParser.parseArtifacts function within the file src/main/java/io/github/hectorvent/floci/services/codebuild/CodeBuildJ...

CVE-2026-124509: floci-io Floci: A vulnerability was identified in floci-io Floci up to 2.1.0

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the component S3 Destination Configuration Handler. Such manipulation of the argument BucketARN leads t...

CVE-2026-124508: floci-io Floci: A vulnerability was determined in floci-io Floci up to 2.4.0

A vulnerability was determined in floci-io Floci up to 2.4.0. Impacted is the function BuildspecParser.parseArtifacts of the file src/main/java/io/github/hectorvent/floci/services/codebuild/CodeBuildJsonHandler.java of the component Artifact Handler. This manipulation of the argument...