255 matches found
CVE-2026-114583 tar filter allows writing outside destination via empty-named symlink
tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall with filter="tar" to write files...
CVE-2026-114583 tar filter allows writing outside destination via empty-named symlink
tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall with filter="tar" to write files...
CVE-2026-114583
The tarfile.tar_filter in the Python tarfile module can be bypassed using crafted link entries, such as symlinks with empty or directory-like names. This vulnerability allows a malicious tar archive to cause tarfile.extractall() (when using filter="tar") to write files outside the intended destin...
CVE-2026-77156 ast-cli: Path traversal in tar extraction on Linux/macOS allows writes outside the install directory
Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS used when installing the Vorpal ASCA real-time engine and the SCA Resolver would allow a malicious tar archive containing absolute or traversal path entries to write files outside the insta...
CVE-2026-77156
The ast-cli tool is vulnerable to a path traversal flaw during tar extraction on Linux and macOS platforms. The root cause is incomplete validation of extracted archive entry paths, which can be exploited by a malicious archive containing absolute or traversal path entries to write files outside ...
GHSA-558C-9HV2-4PRJ virtualenv: Generated files can follow existing destination links
Summary Generated activation files and pyvenv.cfg can follow existing links and write outside the requested environment. The template writer tests exists before unlinking, which misses dangling symlinks; the configuration writer opens the existing path directly. Anthropic's OSS Scanner reported...
virtualenv: Generated files can follow existing destination links
Summary Generated activation files and pyvenv.cfg can follow existing links and write outside the requested environment. The template writer tests exists before unlinking, which misses dangling symlinks; the configuration writer opens the existing path directly. Anthropic's OSS Scanner reported...
SUSE CVE-2026-110923
CVE-2026-110923 has been marked as a duplicate of CVE-2026-106552...
CVE-2026-110923
Rejected reason: CVE-2026-110923 has been marked as a duplicate of CVE-2026-106552...
CVE-2026-110923
A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".." basename that sftp uses as the local destination, writing outside the directory the user selected...
EUVD-2026-101835
A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".." basename that sftp uses as the local destination, writing outside the directory the user selected...
CVE-2026-110923
A flaw exists in OpenSSH where a malicious server can manipulate sftp copy operations. By supplying an empty name, a slash-only path, or a ".." basename , the server can cause the sftp client to write files outside of the local directory selected by the user. This vulnerability affects the openss...
CVE-2026-110923
...
CVE-2026-110923: Improper Limitation of a Pathname to a Restricted Directory
Rejected reason: CVE-2026-110923 has been marked as a duplicate of CVE-2026-106552...
UBUNTU-CVE-2026-110923
A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".." basename that sftp uses as the local destination, writing outside the directory the user selected...
Linux Distros Unpatched Vulnerability : CVE-2026-110923
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash- only path, or a .. basename that sftp uses as the local...
CVE-2026-110923
A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".." basename that sftp uses as the local destination, writing outside the directory the user selected...
openssh: openssh: sftp can write outside the destination directory from a server-supplied path
A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".." basename that sftp uses as the local destination, writing outside the directory the user selected...
CVE-2026-5049: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory...