EUVD-2026-60394

SWE-agent's trajectory inspector sweagent inspector, confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler without rejecting parent-directory '..' references, bypassing the built-in path sanitization. The server binds all interface...

CVE-2026-75482

SWE-agent's trajectory inspector (v1.1.0) exposes a path-traversal vulnerability in its /trajectory/ handler, allowing unauthenticated clients to read arbitrary files shaped as trajectory JSON, potentially leaking repository contents, command output, and API keys. The server binds to 0.0.0.0 with...

GHSA-FM65-XRRR-C358 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-6364-X4QJ-7W59 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-28753 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-82W2-X7HF-5H8R vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-FM65-XRRR-C358 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-HWQ5-42J9-JVQJ vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-28755 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-60005 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-V43F-895R-CHHH vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-X88Q-X2R7-VG3G vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-42530 vulnerabilities

Vulnerabilities for packages: nginx-mainline...

CVE-2026-42926 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-VXCV-H5WJ-JXR5 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-32647 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-40701 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-M73P-XG7Q-M8F2 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

DEBIAN-CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...