pacquet, the Rust package-manager component shipped in the pnpm npm package versions >=12.0.0-alpha.0 and <12.0.0-alpha.5, does not validate dependency alias/name paths taken fr...

CVE-2026-101044

pacquet, the Rust package-manager component shipped in the pnpm npm package versions >=12.0.0-alpha.0 and <12.0.0-alpha.

历史摘要 · 未重新核验 · NVD

Cloudreve before 4.16.1 Path Traversal via Remote Download

CVE-2026-101051

Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated use

历史摘要 · 未重新核验 · OSV.dev

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in...

CVE-2026-97164

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extensio

历史摘要 · 未重新核验 · GitHub Advisory

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extension < 6.5.0 - Using the `images` parameter of the `cache.pr...

CVE-2026-97164

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extensio

历史摘要 · 未重新核验 · NVD

The WebFacing™ WordPress plugin before 5.4 does not restrict access to one of its bundled scripts and does not validate a user-supplied path before using it to include a local ...

CVE-2026-84069

The WebFacing™ WordPress plugin before 5.4 does not restrict access to one of its bundled scripts and does not validate

历史摘要 · 未重新核验 · NVD

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5...

CVE-2026-97163

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

历史摘要 · 未重新核验 · GitHub Advisory

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin...

CVE-2026-97161

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.

历史摘要 · 未重新核验 · GitHub Advisory

Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of...

CVE-2026-100707

Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources

历史摘要 · 未重新核验 · GitHub Advisory

GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules...

CVE-2026-100689

GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodu

历史摘要 · 未重新核验 · GitHub Advisory

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-97163

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

历史摘要 · 未重新核验 · NVD

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-97161

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.

历史摘要 · 未重新核验 · NVD

Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources due to inconsistent path interpretation between validatio...

CVE-2026-100707

Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources

历史摘要 · 未重新核验 · NVD

GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodules. While a prior fix (GHSA-hmq2-w58f-27jc) added Submod...

CVE-2026-100689

GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodu

历史摘要 · 未重新核验 · NVD

Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extracts user-supplied ZIP archives without proper symlink vali...

CVE-2026-100682

Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extrac

历史摘要 · 未重新核验 · NVD

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoint that allows authenticated administrators to write arbitrary HTML content t...

CVE-2026-100636

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoint that allows authe

历史摘要 · 未重新核验 · NVD

Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path

CVE-2026-100707

Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources

历史摘要 · 未重新核验 · OSV.dev

GitPython before 3.1.62 Path Traversal via gitmodules path

CVE-2026-100689

GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodu

历史摘要 · 未重新核验 · OSV.dev

Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink

CVE-2026-100682

Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extrac

历史摘要 · 未重新核验 · OSV.dev

SiYuan before v3.8.4 Path Traversal via exportBrowserHTML folder

CVE-2026-100636

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoint that allows authe

历史摘要 · 未重新核验 · OSV.dev

khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem

### Summary The `/home/{file_path:path}` endpoint in `web_client.py` serves static files by directly concatenating the u

历史摘要 · 未重新核验 · GitHub Advisory