CLEANSTART-2026-GN07707 Previously, resolving relative paths containing parent directory ('

Security vulnerability affects the minio-operator package. Previously, resolving relative paths containing parent directory '...

CVE-2026-72814 actix-web before 0.6.10 Information Disclosure via Files

The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...

Denial of Service (DoS)

Overview std/net/url is a Go standard library package std/net/url Affected versions of this package are vulnerable to Denial of Service DoS. Go Vulnerability Report:Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on...

PT-2026-71984

Name of the Vulnerable Software and Affected Versions actix-files versions prior to 0.6.10 Description An information exposure issue exists when a non-existing folder is provided as the serve from argument to the Files::new function. In this scenario, the mount path defaults to an empty path, and...

CVE-2021-36376: Uncontrolled Search Path Element

dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory...

PT-2021-21258

Name of the Vulnerable Software and Affected Versions dandavison delta version 0.8.2 and earlier git-delta version 0.8.2 and earlier Description The issue arises when the software resolves an executable's pathname as a relative path from the current directory on Windows. This could potentially le...