CVE-2026-101068 dbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal

A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packages/api/src/utility/zipJsonLinesData.js of the component Create Connection Endpoint. Performing a manipulation of the argument filePath results in path traversal. Remote...

EUVD-2026-88243

A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packages/api/src/utility/zipJsonLinesData.js of the component Create Connection Endpoint. Performing a manipulation of the argument filePath results in path traversal. Remote...

PT-2026-99871

Name of the Vulnerable Software and Affected Versions dbgate versions prior to 7.3.2 Description A path traversal flaw exists in the Create Connection Endpoint component. The issue occurs within the zipJsonLinesData function located in the packages/api/src/utility/zipJsonLinesData.js file. By...

CVE-2026-101068: Improper Limitation of a Pathname to a Restricted Directory

A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packages/api/src/utility/zipJsonLinesData.js of the component Create Connection Endpoint. Performing a manipulation of the argument filePath results in path traversal. Remote...