CVE-2026-129260

A path traversal vulnerability exists in Mereithhh VanBlog up to version 0.54.0 . The flaw is located in the fs.readFileSync function within the local.provider.ts file of the Custom Page Handler component. An attacker can exploit this remotely by manipulating the path argument to access unauthori...

EUVD-2026-125941

A security vulnerability has been detected in Mereithhh VanBlog up to 0.54.0. This vulnerability affects the function fs.readFileSync of the file local.provider.ts of the component Custom Page Handler. The manipulation of the argument path leads to path traversal. The attack is possible to be...