CVE-2026-100636 SiYuan before v3.8.4 Path Traversal via exportBrowserHTML folder

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoint that allows authenticated administrators to write arbitrary HTML content to index.html outside the workspace directory. Attackers can supply a folder parameter with directory traversal sequences...

CVE-2026-100636 SiYuan before v3.8.4 Path Traversal via exportBrowserHTML folder

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoint that allows authenticated administrators to write arbitrary HTML content to index.html outside the workspace directory. Attackers can supply a folder parameter with directory traversal sequences...

CVE-2026-100636

SiYuan versions before v3.8.4 are vulnerable to a path traversal vulnerability in the exportBrowserHTML endpoint. This flaw allows authenticated administrators to supply a folder parameter containing directory traversal sequences to escape the export directory. By doing so, an attacker can write ...

CVE-2026-100635 SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie

SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext HTTP connections. An on-path attacker can observe a valid publish-visitor-session-id cookie from a Basic Auth exchange...

CVE-2026-100635 SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie

SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext HTTP connections. An on-path attacker can observe a valid publish-visitor-session-id cookie from a Basic Auth exchange...

CVE-2026-100635 SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie

SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext HTTP connections. An on-path attacker can observe a valid publish-visitor-session-id cookie from a Basic Auth exchange...

EUVD-2026-87727

SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard util.IsForbiddenAbsPath, invoked from resolvePath is applied only to the allowed root of recursive operations and not to each resolved descendant path — an...

CVE-2026-100633 SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations

SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard util.IsForbiddenAbsPath, invoked from resolvePath is applied only to the allowed root of recursive operations and not to each resolved descendant path — an...

CVE-2026-100633 SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations

SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard util.IsForbiddenAbsPath, invoked from resolvePath is applied only to the allowed root of recursive operations and not to each resolved descendant path — an...

CVE-2026-100633

The SiYuan personal knowledge management system (versions 3.8.0 through 3.8.3 ) contains a sensitive-path guard bypass in the MCP file tool . The root cause is that the util.IsForbiddenAbsPath() check (invoked via resolvePath()) is only applied to the root of recursive operations rather than each...

CVE-2026-100633 SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations

SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard util.IsForbiddenAbsPath, invoked from resolvePath is applied only to the allowed root of recursive operations and not to each resolved descendant path — an...

EUVD-2026-87701

Flowise through 3.1.4 Enterprise/platform mode with SSO enabled contains an authentication bypass in the SSO login path. When an SSO callback arrives with an email matching a user whose status is INVITED, verifyAndLogin SSOBase.ts:80-94 copies the user record from the database — including the...

CVE-2026-100606

Flowise versions through 3.1.4 (Enterprise/platform mode with SSO enabled) are vulnerable to an authentication bypass in the SSO login path. The root cause lies in verifyAndLogin (SSOBase.ts:80-94 ), which incorrectly copies the database user record—including the server-stored tempToken—into the ...

python-cryptography security update

An update is available for python-cryptography. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programmi...

RLSA-2026:71658 Important: python-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Exploit for CVE-2026-65320

CVE-2026-65320: Path Traversal Tar Slip in fastcore via unt...

Path Traversal

org.jenkins-ci.plugins, external-workspace-manager is vulnerable to path traversal. The vulnerability is due to improper validation of custom workspace paths in the exwsAllocate Pipeline step, which allows an attacker with Item/Configure permission to read arbitrary files on the Jenkins controlle...

CVE-2026-100549

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling where filenames are decoded twice, allowing encoded traversal segments to reappear after sanitization. Attackers can supply crafted voice attachments that write files outside the intended...

CVE-2026-100546

OpenClaw npm package openclaw versions = 2026.7.2 and 2026.9.2 contain a race condition in the Discord realtime voice transcript path. Concurrent control-classified voice transcripts could consume speaker context belonging to another participant after an asynchronous control check, causing a...

CVE-2026-100536

OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause...