PT-2026-120735

Name of the Vulnerable Software and Affected Versions Nuxt versions prior to 4.6.2 Description Nuxt resolves pages case-insensitively by default, whereas Nitro matches server-side route-rule keys case-sensitively. This discrepancy allows requests with paths that differ only by letter case to rend...

Design/Logic Flaw

The 1 getRule and 2 getChains functions in server/rules.cpp in fireflierd fireflier-server in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file...