PraisonAI is a multi-agent teams system. Prior to version 4.6.37, the _safe_extractall helper that all recipe pull, recipe publish, and recipe unpack flows route through validat...

CVE-2026-44340

PraisonAI is a multi-agent teams system. Prior to version 4.6.37, the _safe_extractall helper that all recipe pull, reci

历史摘要 · 未重新核验 · NVD

BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context

CVE-2026-40610

### Summary BentoML's `bentoml build` packaging workflow follows attacker-controlled symlinks inside the build context a

历史摘要 · 未重新核验 · GitHub Advisory

gix-fs: Symlink prefix-reuse allows worktree escape during checkout

CVE-2026-44471

### Summary A malicious tree can be constructed that will, when checked out with gitoxide, permit writing an attacker-c

历史摘要 · 未重新核验 · GitHub Advisory

ciguard: discover_pipeline_files follows symlinks out of scan root

CVE-2026-44220

## Summary The `discover_pipeline_files()` function in `src/ciguard/discovery.py` (introduced in v0.8.0 and used by the

历史摘要 · 未重新核验 · GitHub Advisory

A security flaw has been discovered in IObit Advanced SystemCare 19. This affects an unknown part of the file ASC.exe of the component Service. The manipulation results in symli...

CVE-2026-7832

A security flaw has been discovered in IObit Advanced SystemCare 19. This affects an unknown part of the file ASC.exe of

历史摘要 · 未重新核验 · NVD

apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root

CVE-2026-42574

### Impact A crafted `.apk` could install a `TypeSymlink` tar entry whose target pointed outside the build root, and a

历史摘要 · 未重新核验 · GitHub Advisory

Contras Affected by CopyFile Policy Subversion via Symlinks

### Impact The [Kata agent policies](https://docs.edgeless.systems/contrast/architecture/components/policies) generated

历史摘要 · 未重新核验 · GitHub Advisory

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server

CVE-2026-41882

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local f

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path of the file tools/file_tools.py. The manipulation results...

CVE-2026-7397

A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path

历史摘要 · 未重新核验 · NVD

Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker wit...

CVE-2026-27105

Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link

历史摘要 · 未重新核验 · NVD

Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This...

CVE-2026-5161

Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Res

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload...

CVE-2026-41364

OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attack

历史摘要 · 未重新核验 · GitHub Advisory

When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write...

CVE-2026-40977

When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file'

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attackers to write arbitrary files. Attackers can exploit this ...

CVE-2026-41364

OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attack

历史摘要 · 未重新核验 · NVD

When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the host each time the...

CVE-2026-40977

When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file'

历史摘要 · 未重新核验 · NVD

Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privileged users to copy files to unauthorized system locations using the quaranti...

CVE-2023-53973

Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privileged users to copy

来源摘录 · NVD

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common G...

CVE-2024-9341

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file pa

来源摘录 · NVD

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may ...

CVE-2023-23697

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during un

来源摘录 · NVD

A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the loc...

CVE-2013-0261

A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name i

来源摘录 · NVD