SUSE CVE-2026-46671

🗓️ 21 Jul 2026 13:08:27Reported by Suse CVEType

Older onenote_parser may open files via crafted .onetoc2; upgrade to 1.1.1 or parse only trusted notebooks.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-46671	20 Jul 202615:56	–	attackerkb
CVE	CVE-2026-46671	20 Jul 202615:56	–	cve
Cvelist	CVE-2026-46671 Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory	20 Jul 202615:56	–	cvelist
EUVD	EUVD-2026-45987	20 Jul 202615:56	–	euvd
Github Security Blog	Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory	21 May 202621:32	–	github
NVD	CVE-2026-46671	20 Jul 202616:17	–	nvd
OSV	CVE-2026-46671 Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory	20 Jul 202615:56	–	osv
OSV	GHSA-4J5M-WC25-PVH7 Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory	21 May 202621:32	–	osv
Positive Technologies	PT-2026-42697	21 May 202600:00	–	ptsecurity
vulnersOsv	one2html (>=1.0.0 <=1.1.1) potentially affected by CVE-2026-46671 via onenote_parser (>=0.2.1 <=0.3.1)	21 May 202621:32	–	vulnersosv