Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that serves fi...

CVE-2026-8023

Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, ava

历史摘要 · 未重新核验 · NVD

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files ...

CVE-2026-25707

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by re

历史摘要 · 未重新核验 · NVD

pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement

CVE-2026-50016

## Summary pnpm allows a transitive dependency alias from registry package metadata to contain path traversal segments.

历史摘要 · 未重新核验 · GitHub Advisory

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm allows a transitive dependency alias from registry package metadata to contain path traversal segments. During insta...

CVE-2026-50016

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm allows a transitive dependency alias from registry package

历史摘要 · 未重新核验 · NVD

Relative Path Traversal vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.15.0. Users are recommended to upgrade to version 2.16.0, whic...

CVE-2026-45188

Relative Path Traversal vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.15.0.

历史摘要 · 未重新核验 · NVD

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 ("Path Traversal via Double URL Encoding") sanitized the /export/ rou...

CVE-2026-54066

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 ("Path Trave

历史摘要 · 未重新核验 · NVD

Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences (../) are accepted by Gogs, and repositories under them a...

CVE-2026-52813

Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences

历史摘要 · 未重新核验 · NVD

Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir

CVE-2026-48126

### Summary When algernon is started with `--domain` (or `--letsencrypt`, which silently turns on `--domain` at `engine

历史摘要 · 未重新核验 · GitHub Advisory

A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3...

CVE-2026-41046

A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to

历史摘要 · 未重新核验 · GitHub Advisory

A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a de...

CVE-2026-41046

A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to

历史摘要 · 未重新核验 · NVD

Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data

### Summary `EnvironmentManager.restore(env, backupId)` computes the backup path with `join(envDir, '.backups', backupId

历史摘要 · 未重新核验 · GitHub Advisory

Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory

### Summary `AgentRuntime` promises scoped file access under a configured sandbox `basePath`, but its path containment c

历史摘要 · 未重新核验 · GitHub Advisory

Slopsmith is a self-contained web application for browsing, playing, and practicing Rocksmith 2014 Custom DLC (CDLC). Prior to 0.2.9-alpha.5, a path-traversal vulnerability in S...

CVE-2026-49290

Slopsmith is a self-contained web application for browsing, playing, and practicing Rocksmith 2014 Custom DLC (CDLC). Pr

历史摘要 · 未重新核验 · NVD

Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate (...

CVE-2026-10720

Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-im

历史摘要 · 未重新核验 · NVD

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to...

CVE-2026-8100

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints

历史摘要 · 未重新核验 · GitHub Advisory

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper...

CVE-2026-8100

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints

历史摘要 · 未重新核验 · NVD

Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a path traversal vulnerability in the documentName parameter of the /safe/selfservice/openselfservice...

CVE-2026-34026

Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a path traversal vulnerability in the docume

历史摘要 · 未重新核验 · NVD

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-48569

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · NVD

Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

CVE-2026-47287

Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

历史摘要 · 未重新核验 · NVD

Source controller: Improper path handling allows traversal

CVE-2026-47680

### Impact An actor with the ability to influence the contents of a bucket referenced by a `Bucket` resource can cause

历史摘要 · 未重新核验 · GitHub Advisory