FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment upload handler that allows authenticated attackers to execute arbitrary code by uploading...

CVE-2026-40521

FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment upload handler that allows authe

历史摘要 · 未重新核验 · NVD

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal. This issue affects Embed Privacy: f...

CVE-2026-57346

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy al

历史摘要 · 未重新核验 · NVD

A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the guest operating...

CVE-2026-57966

A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to wri

来源摘录 · NVD

A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT. The impacted element is the function generateUploadPath of the file yudao-module-inf...

CVE-2026-13528

A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT. The impacted element is the

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler...

CVE-2026-13509

A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remov

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remove_file of the file src/ragapp/backend/controllers/files.p...

CVE-2026-13509

A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remov

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function...

CVE-2026-13503

A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile o

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.j...

CVE-2026-13503

A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile o

历史摘要 · 未重新核验 · NVD

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated...

CVE-2026-28701

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config

## Summary `pnpm` accepts package names from the env lockfile `configDependencies` section and uses those names directl

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: `patch-remove` could delete project-selected files outside the patches directory

## Summary The `patch-remove` deletion-scope issue tracked as GHSA-72r4-9c5j-mj57 / CAND-PNPM-030 has been addressed in

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Hoisted install imports lockfile alias outside node_modules

## Summary The hoisted dependency alias issue tracked as GHSA-fr4h-3cph-29xv / CAND-PNPM-059 has been addressed in both

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: `stage download` writes outside its destination directory via manifest name/version traversal

CVE-2026-55700

## Summary The staged-tarball filename traversal reported as GHSA-v23m-ccfg-pq9h / CAND-PNPM-038 is fixed on `main` by

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Reserved bin name deletes PNPM_HOME during global remove

CVE-2026-55699

Maintainer Action Plan ## Maintainer Action Plan This report is ready to review with the shared patch branch. Start w

历史摘要 · 未重新核验 · GitHub Advisory

gonic: Path Traversal in playlist `id` bypasses ownership check, enabling any user to read/delete other users' playlists

CVE-2026-49339

## Summary The maintainer's recent fix in [`6dd71e6a3c966867ef8c900d359a7df75789f410`](https://github.com/sentriz/gonic

历史摘要 · 未重新核验 · GitHub Advisory

gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host

CVE-2026-49340

## Summary A logic error in `ServeCreateOrUpdatePlaylist` allows **any authenticated Subsonic user** (including non-adm

历史摘要 · 未重新核验 · GitHub Advisory

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file syste...

CVE-2026-28701

该漏洞影响 Daktronics 控制器固件的多个版本。由于对用户输入路径验证不完善，未经身份验证和已认证的远程攻击者均可利用目录遍历技术，突破预期的目录限制，枚举任意文件系统路径。攻击者可读取控制器上的任意文件，包括敏感配置、凭据等，进而

历史摘要 · 未重新核验 · NVD

Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key

CVE-2026-53519

### Summary `fallbackToFrontend` in the dashboard's `NoRoute` handler treats any URL whose **raw string** starts with `/

历史摘要 · 未重新核验 · GitHub Advisory

pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)

CVE-2026-50015

## Summary pnpm's patch application pipeline (`@pnpm/patch-package`) performs no path validation on file paths extracte

历史摘要 · 未重新核验 · GitHub Advisory

YARD static cache reads raw traversal paths before router sanitization

CVE-2026-49342

### Summary YARD's static cache lookup reads a request path before the router's path cleanup runs. When a server is conf

历史摘要 · 未重新核验 · GitHub Advisory