CVE-2026-116046

The eventcatalog sdk (up to version 2.29.0 ) is vulnerable to a path traversal flaw in the Custom Documentation Helpers component. Specifically, the functions getCustomDoc, writeCustomDoc, and rmCustomDoc within the file packages/sdk/src/custom-docs.ts fail to properly handle the options.path arg...