CVE-2026-42000: Improper Neutralization of Special Elements used in a Command

Insufficient Validation of Names During AXFR...

PT-2026-38271

Name of the Vulnerable Software and Affected Versions Flight versions prior to 3.18.1 Description The make:controller CLI command allows arbitrary directory creation outside the project root. This occurs because the command calls mkdir..., recursive: true on a path constructed from a user-supplie...