File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file...

CVE-2026-17435

File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When th

历史摘要 · 未重新核验 · NVD

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbo...

CVE-2026-71556

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree opera

历史摘要 · 未重新核验 · NVD

go-git: Worktree operations may follow symlinks

CVE-2026-71556

## Impact A symlink traversal issue in `go-git` could allow worktree operations to modify files outside the intended wo

历史摘要 · 未重新核验 · GitHub Advisory

Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache arti...

CVE-2026-71476

Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx sel

历史摘要 · 未重新核验 · NVD

Nx: Zip-Slip in the self-hosted remote cache

CVE-2026-71476

## Summary The Nx **self-hosted HTTP remote cache** extracts downloaded cache artifacts without constraining where file

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component...

CVE-2026-19008

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape

历史摘要 · 未重新核验 · NVD

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security revie...

CVE-2026-20310

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering t

历史摘要 · 未重新核验 · NVD

Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could...

CVE-2026-40717

Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnera

历史摘要 · 未重新核验 · NVD

A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve ...

CVE-2026-18508

A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confin

来源摘录 · NVD

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/...

CVE-2026-54706

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with frien

历史摘要 · 未重新核验 · NVD

OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files

CVE-2026-54706

### Summary OnionShare CLI/Desktop 2.6.3 can follow symbolic links inside a selected Share or Website directory and serv

历史摘要 · 未重新核验 · GitHub Advisory

OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files

CVE-2026-54706

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with frien

历史摘要 · 未重新核验 · OSV.dev

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In version 6.0.0, the logfile check legacy database migrati...

CVE-2026-67433

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In

历史摘要 · 未重新核验 · NVD

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected instal...

CVE-2026-13268

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows

历史摘要 · 未重新核验 · NVD

A vulnerability in the `zipx.Unzip` extraction routine of Develar's app-builder allows an attacker to overwrite arbitrary files on macOS APFS by exploiting a Unicode Normalizati...

CVE-2026-13723

A vulnerability in the `zipx.Unzip` extraction routine of Develar's app-builder allows an attacker to overwrite arbitrar

历史摘要 · 未重新核验 · NVD

skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source

### Impact `skilo add` installs a skill by recursively copying the skill directory into the target skills directory. Th

历史摘要 · 未重新核验 · GitHub Advisory

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to modify pro...

CVE-2026-43765

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 1

历史摘要 · 未重新核验 · NVD

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the...

CVE-2026-17459

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.exter

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/Exte...

CVE-2026-17459

CVE-2026-17459 是 SparkJava (perwendel/spark) 组件中的一个路径遍历漏洞，影响版本 up to 2.9.4。该漏洞位于 ExternalResourceHandler.java 文件的 static

历史摘要 · 未重新核验 · NVD

perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink

CVE-2026-17459

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.exter

历史摘要 · 未重新核验 · OSV.dev