55590 matches found
CVE-2026-86258 nbviewer through 1.0.1 Path Traversal via LocalFileHandler
nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.canshow that uses string-prefix comparison instead of proper path validation. Attackers can read files from sibling directories outside the configured root by requesting paths that share the root as a textual prefi...
CVE-2026-86258
nbviewer through version 1.0.1 is affected by a path traversal vulnerability in LocalFileHandler.can_show(). The root cause is the use of string-prefix comparison instead of proper path validation, allowing attackers to request paths that share the configured root as a textual prefix and thereby ...
CVE-2026-86253
h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...
CVE-2026-86251
h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences e.g. %252e%252e to be decoded to %2e%2e, which survives resolveDotSegments because that function only checks for litera...
CVE-2026-86253
h3 (npm package) versions up to 2.0.1-rc.14 and 1.x before 1.15.6 are affected by a path traversal vulnerability in serveStatic() . On Node.js deployments, the URL pathname is not normalized before being passed to decodeURI(), so percent-encoded dot segments (%2e%2e) decode to ../ sequences witho...
EUVD-2026-72109
h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...
CVE-2026-86253 h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segments
h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...
CVE-2026-86253 h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segments
h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...
EUVD-2026-72107
h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences e.g. %252e%252e to be decoded to %2e%2e, which survives resolveDotSegments because that function only checks for litera...
CVE-2026-86251 h3 before 1.15.9 Path Traversal via Double Decoding
h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences e.g. %252e%252e to be decoded to %2e%2e, which survives resolveDotSegments because that function only checks for litera...
CVE-2026-86251
Versions of h3 before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. The root cause is a double-decoding flaw : a request path containing double-encoded dot sequences (e.g. %252e%252e) decodes to %2e%2e, which survives the resolveDotSegments() function because it only c...
CVE-2026-86251 h3 before 1.15.9 Path Traversal via Double Decoding
h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences e.g. %252e%252e to be decoded to %2e%2e, which survives resolveDotSegments because that function only checks for litera...
PT-2026-86528
nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can show that uses string-prefix comparison instead of proper path validation. Attackers can read files from sibling directories outside the configured root by requesting paths that share the root as a textual...
PT-2026-86520
h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences e.g. %252e%252e to be decoded to %2e%2e, which survives resolveDotSegments because that function only checks for litera...
CVE-2026-67281 Unauthenticated file read in Mikrotik RouterOS
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...
CVE-2026-86189
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to write files to arbitrary locations by supplying a caller-chosen path in the avideoRelativePath parameter. Attackers can replay any previously issued ciphertext as a notifyCode...
EUVD-2026-72010
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to write files to arbitrary locations by supplying a caller-chosen path in the avideoRelativePath parameter. Attackers can replay any previously issued ciphertext as a notifyCode...
CVE-2026-86189
WWBN AVideo is affected by an unauthenticated path traversal vulnerability in notify.ffmpeg.json.php . By supplying a caller-chosen value in the avideoRelativePath parameter, an attacker can write files to arbitrary locations within the application root and its subdirectories. Authentication is b...
CVE-2026-86189 WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to write files to arbitrary locations by supplying a caller-chosen path in the avideoRelativePath parameter. Attackers can replay any previously issued ciphertext as a notifyCode...
