CVE-2026-54617

creationtimestamp| type| source ---|---|--- 2026-07-02 22:35:04+00:00| published-proof-of-concept| https://github.com/GravitLauncher/Launcher/security/advisories/GHSA-5g75-477j-2c2f 2026-07-03 21:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprjywsdgq2e...

GHSA-5G75-477J-2C2F LaunchServer FileServerHandler has an unauthenticated path traversal issue

Summary An unauthenticated path traversal in the LaunchServer HTTP file server FileServerHandler lets any remote actor read any file readable by the LaunchServer process e.g. ../../../../etc/passwd. This is a generic arbitrary-file-read primitive, so the fix must address the traversal itself, not...

Malicious code in gravitlauncher-ws-api (npm)

The package gravitlauncher-ws-api was found to contain malicious code...

MAL-2025-21899 Malicious code in gravitlauncher-ws-api (npm)

The package gravitlauncher-ws-api was found to contain malicious code...