#cwe-67

共收录 2 条相关情报。

← 返回所有主题

安全公告2026-10-05 发布INFO

Werkzeug safe_join() allows Windows special device names

CVE-2026-102598

Werkzeug's `safe_join` function allows Windows device names as filenames when they have an empty ADS marker on NTFS. Th

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-67 #severity:medium

漏洞预警2026-09-29 发布INFO

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safe_join function used by send_from_directory can allow a NUL: special-device path because safe_jo...

CVE-2026-102598

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safe_join function used by send_from_direc

历史摘要 · 未重新核验 · NVD