Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/07/22 9:6 p.m.12 views

Dompdf: Chroot Validation Bypass

Summary The chroot check for local files uses a prefix string check to enforce chroot boundaries. The simple string comparison it performs allows paths like /var/www/rootsecret/file.html when chroot is /var/www/root. This allows attacker-controlled document paths/resources to bypass intended loca...

7.5CVSS5.6AI score0.00278EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/01/07 5:31 p.m.8 views

CLSA-2026-1767807099 curl: Fix of CVE-2025-9086

CVE-2025-9086: cookie: don't treat the leading slash as trailing...

7.5CVSS6.4AI score0.01395EPSS
SaveExploits1References1
Rows per page
Query Builder