Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/06/16 9:02 p.m.25 views

Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server

Summary Three backward-compatible hardening fixes in the Docker API server. The headline issue is an arbitrary file write via the screenshot/PDF outputpath. 1. Arbitrary file write via outputpath symlink / TOCTOU primary POST /screenshot and POST /pdf accept an outputpath constrained to...

5.6AI score
SaveExploits0References7Affected Software1
Rows per page
Query Builder