Lucene search
+L

3 matches found

OSV
OSV
added 2026/06/16 9:02 p.m.29 views

GHSA-7CX2-G3H9-382P Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server

Summary Three backward-compatible hardening fixes in the Docker API server. The headline issue is an arbitrary file write via the screenshot/PDF outputpath. 1. Arbitrary file write via outputpath symlink / TOCTOU primary POST /screenshot and POST /pdf accept an outputpath constrained to...

8.1CVSS5.7AI score0.00912EPSS
SaveExploits0References7
Rows per page
Query Builder