65154 matches found
Directory Traversal
Overview @xhmikosr/decompress is an Extracting archives made easy Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the directory containment check...
CVE-2026-55379
creationtimestamp| type| source ---|---|--- 2026-07-06 20:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z 2026-07-20 22:37:42+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc...
CVE-2026-9182
creationtimestamp| type| source ---|---|--- 2026-07-06 20:18:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvxqfq4f2z 2026-07-08 03:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq47nlkutf2h...
EUVD-2026-24981
rm: --preserve-root bypassed via a symlink to / string check instead of dev/inode...
CVE-2026-35371
creationtimestamp| type| source ---|---|--- 2026-07-06 20:12:01+00:00| seen| https://gist.github.com/alon710/f5f0c292471d2cc05167d6fa94d49a4e...
CVE-2026-44362
creationtimestamp| type| source ---|---|--- 2026-07-06 20:09:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvhisihn24...
CVE-2026-53763
creationtimestamp| type| source ---|---|--- 2026-07-06 20:07:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvcz6rwr2v...
CVE-2026-55380
creationtimestamp| type| source ---|---|--- 2026-07-06 20:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyv6ureav2v 2026-07-20 22:37:39+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm...
CVE-2026-58403
creationtimestamp| type| source ---|---|--- 2026-07-06 19:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyuu3futf27...
EUVD-2026-24994
install -D: symlink race in directory creation allows arbitrary file overwrite...
CVE-2026-14536
creationtimestamp| type| source ---|---|--- 2026-07-06 19:52:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyuiedjme2v...
CVE-2026-14898
The CVE affects the OpenAI Codex desktop app for macOS, where rendering remote images from Markdown in model responses can exfiltrate data. An indirect prompt injection in content (e.g., from connected tools or untrusted sources) could cause the model to construct a remote image URL containing se...
GHSA-JV8R-GQR9-68WJ
creationtimestamp| type| source ---|---|--- 2026-07-06 19:19:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpysnxoqkx22 2026-07-07 00:01:32+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcfyt62f2d...
GHSA-PJMC-GX33-GC76
creationtimestamp| type| source ---|---|--- 2026-07-06 19:19:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpysnxoqkx22 2026-07-07 00:01:32+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcfyt62f2d...
CVE-2026-57649
creationtimestamp| type| source ---|---|--- 2026-07-06 19:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpysfub4n22k...
CVE-2026-58380
creationtimestamp| type| source ---|---|--- 2026-07-06 16:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyklqfidn2z...
CVE-2026-13122
creationtimestamp| type| source ---|---|--- 2026-07-06 16:45:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyjztr2ey22 2026-07-09 20:01:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqagfnydfd2g...
CVE-2024-20449
creationtimestamp| type| source ---|---|--- 2026-07-06 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpyjlcivqo2s...
CVE-2026-58203
pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secretsdir. When secretsnestedsubdir=True, a directory entry inside secretsdir that is a symbolic link pointing outside secretsdir is...