https://advisories.gitlab.com/golang/github.com/lf-edge/ekuiper/v2/GHSA-fv2p-qj5p-wqq4/
LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement | GitLab Advisory...
GHSA-fv2p-qj5p-wqq4 LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement: Path traversal is also known as directory traversal. These...
file pathedgevulnerabletraversalleading
https://www.miggo.io/vulnerability-database/cve/CVE-2026-101067
CVE-2026-101067: dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal | Miggo
A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component...
path traversalcvesaveuploadedfile
https://www.sentinelone.com/vulnerability-database/cve-2025-10233/
CVE-2025-10233: Kodcloud Kodbox Path Traversal Vulnerability
Jun 17, 2026 - CVE-2025-10233 is a path traversal vulnerability in Kodcloud Kodbox 1.61. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycve
https://www.sentinelone.com/vulnerability-database/cve-2021-46830/
CVE-2021-46830: GoAnywhere MFT Path Traversal Vulnerability
Nov 21, 2024 - CVE-2021-46830 is a path traversal vulnerability in GoAnywhere MFT. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycvemft
https://cve-explore.com/cve/CVE-2021-41773
Path Traversal in Apache HTTP Server — CVE-2021-41773 | CVE Explore
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. Affects Apache HTTP Server. Severity: Critical (CVSS 9.8). Disclosed…
apache http serverpath traversalcveexplore
https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/ci-with-toad-edge/CVE-2022-28148/
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | GitLab Advisory...
CVE-2022-28148 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'): The file browser in Jenkins Continuous Integration with Toad...
of adirectory pathimproperlimitationpathname
https://www.sentinelone.com/vulnerability-database/cve-2026-90930/
CVE-2026-90930: File Browser Path Traversal Vulnerability
Sep 14, 2026 - CVE-2026-90930 is a path traversal vulnerability in File Browser. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilityfile browsercve
https://advisories.gitlab.com/pypi/ait-core/CVE-2026-47731/
NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered...
CVE-2026-47731 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated...
path traversalresulting incan benasaammos
https://cyberthreatintelligence.net/cve/CVE-2025-34028
CVE-2025-34028 — Commvault Command Center Path Traversal Vulnerability | Cyber Threat Intelligence
Oct 15, 2026 - CVE-2025-34028 — Commvault Command Center Path Traversal Vulnerability. Affects Commvault Command Center. Rated CRITICAL (CVSS 10). Listed in the CISA Known...
path traversal vulnerabilitycyber threat intelligencecommand centercvecommvault
https://advisories.gitlab.com/pypi/gradio/CVE-2026-49119/
Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks |...
CVE-2026-49119 Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks: Gradio before 6.16.0 contain a path traversal...
path traversalgradiopreprocessallowsfiles
https://www.sentinelone.com/vulnerability-database/cve-2026-28769/
CVE-2026-28769: IDC SFX SuperFlex Path Traversal Flaw
Mar 5, 2026 - CVE-2026-28769 is a path traversal vulnerability in IDC SFX SuperFlex Satellite Receiver. Learn about its impact, affected versions, and mitigation methods.
path traversalcveidcsfxsuperflex
https://wasteland.me/intel/CVE-2026-85684
CVE-2026-85684: Unauthenticated Path Traversal in marker Lets Attackers Write or Delete Any File —...
A critical path traversal flaw in the marker document-conversion server (through version 2.0.0) allows unauthenticated attackers to write arbitrary files...
path traversalcveunauthenticatedmarkerlets
https://advisories.gitlab.com/pypi/mlflow/CVE-2023-6977/
Path Traversal: '\..\filename' | GitLab Advisory Database (GLAD)
CVE-2023-6977 Path Traversal: '\..\filename': This vulnerability enables malicious users to read sensitive files on the server.
path traversalfilenamegitlabadvisorydatabase
https://codeant.ai/vulnerability-database/cve-2026-18427
Path Traversal (CWE-22) in @fastify/static Route Handler
@fastify/static before version 10.1.3 contains an incomplete fix for a previous route guard bypass. The static file handler rejected only parent directory...
path traversalstatic routecwefastifyhandler
https://o3.security/vulnerability/CVE-2026-66384
CVE-2026-66384: Artifactory Path Traversal (KEV)
Aug 28, 2026 - CVE-2026-66384 is actively exploited in the wild (CISA KEV) — Medium 5.3 severity. It affects Artifactory. An authenticated user may write data outside the…
path traversalcveartifactorykev
https://www.invicti.com/web-application-vulnerabilities/jenkins-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-cve-2018-6356
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...
Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs ... Jenkins...
of adirectory pathjenkinsimproperlimitation
https://broadside.deepfathom.ai/story/cisa-flags-rockwell-studio-5000-path-traversal-code-execution-flaws-x67if0
CISA flags Rockwell Studio 5000 path traversal, code execution flaws — The Broadside
Jul 21, 2026 - The Cybersecurity and Infrastructure Security Agency published ICSA-26-202-10 for three Rockwell Automation Studio 5000 Logix Designer vulnerabilities:...
path traversalcode executionthe broadsidecisaflags
https://socprime.com/de/blog/cve-2025-20059-pingam-java-agent-vulnerability/
CVE-2025-20059: Relative Path Traversal-Schwachstelle im Ping Identity PingAM Java Policy Agent |...
Aug 20, 2026 - Erkunden Sie die Analyse von CVE-2025-20059, einer kritischen Schwachstelle in Ping Identity PingAM Java Policy, mit den Details, die im SOC Prime Blog...
relative pathping identitycvetraversalschwachstelle
https://advisories.gitlab.com/swift/github.com/marmelroy/zip/CVE-2023-39135/
Path traversal in Zip Swift | GitLab Advisory Database (GLAD)
CVE-2023-39135 Path traversal in Zip Swift: An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry.
path traversalzipswiftgitlabadvisory
https://www.cybersecurity-help.cz/vdb/vulns/83960/
Path traversal in Apache Struts - CVE-2023-50164
path traversalapache strutscve
https://skyve.org/blog/2026/9/25/security-advisory-cve-2026-84939-apache-freemarker-path-traversal-vulnerability
Security Advisory: CVE-2026-84939 – Apache FreeMarker Path Traversal Vulnerability
path traversal vulnerabilitysecurity advisoryapache freemarkercve
https://devhub.checkmarx.com/cve-details/cve-2022-1993/
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in gogs.io/gogs -...
Jan 9, 2023 - Path Traversal in gogs/gogs prior to 0.12.9-rc.1.
of adirectory pathimproperlimitationpathname
https://db.fluidattacks.com/rul/SAST-PRVRF/
Typescript Path Traversal Vulnerability Express | Fluid Attacks Database
Typescript: Detects path traversal vulnerabilities in Express.js applications where user-controlled input can be used to access files outside the…
path traversal vulnerabilityfluid attackstypescriptexpressdatabase
https://nflo.tech/knowledge-base/2026-04-21-cve-2026-40050-en/
CVE-2026-40050: Unauthenticated path traversal in CrowdStrike LogScale | nFlo
Security Alert - CVE-2026-40050 (CrowdStrike LogScale). CVSS: 9.8 (critical).
path traversalcveunauthenticatedcrowdstrikelogscale
https://www.sentinelone.com/vulnerability-database/cve-2026-84365/
CVE-2026-84365: Hono Framework Path Traversal Vulnerability
Sep 1, 2026 - CVE-2026-84365 is a path traversal vulnerability in Hono Web framework. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycvehonoframework
https://codeant.ai/vulnerability-database/cve-2026-73040
Path Traversal (CWE-22) in Dockge Stack Manager Backend
CVE-2026-73040 in Dockge enables authenticated path traversal, exposing Compose secrets and deleting directories outside the managed stacks directory.
path traversalcwestackmanagerbackend
https://codeant.ai/vulnerability-database/cve-2026-25539
Path Traversal File Write in SiYuan copyFile Allows
An input validation flaw in SiYuan's /api/file/copyFile endpoint allows authenticated users to write files to arbitrary paths on the server filesystem.
path traversalwrite infileallows
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-26064
2441262 – (CVE-2026-26064) CVE-2026-26064 calibre: Calibre: Remote Code Execution via Path Traversal
remote code executionpath traversalcvecalibrevia
https://advisories.gitlab.com/maven/net.sf.mpxj/mpxj/CVE-2026-65829/
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers | GitLab...
CVE-2026-65829 MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers: When reading a suitably crafted PRX or STX file, MPXJ...
path traversal vulnerabilitypotentialprimaveraprxstx
https://mobile-industrial-robots.com/zh/security-advisories/path-traversal
Path Traversal
Sep 29, 2025 - MiR robot software versions prior to version 3.0.0 are affected by a path traversal vulnerability. Authenticated users could abuse a vulnerable API endpoint to...
path traversal
https://managed-wp.com/blogs/mitigating-path-traversal-in-wordpress-customer-area-cve202642661-2026-05-03/
Mitigating Path Traversal in WordPress Customer Area | CVE202642661 | 2026-05-03 | Managed-WP.™
An authoritative breakdown of the critical path traversal flaw (CVE-2026-42661) impacting WP Customer Area plugin versions up to 8.3.4, including risk…
path traversalcustomer areamitigatingwordpressmanaged
https://vdb.ai.kr/vuln/PYSEC-2026-4108
PYSEC-2026-4108 — MPXJ: Potential Path Traversal Vulnerability in Primavera P3 P · VDB
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers
path traversal vulnerabilitypotentialprimaveravdb
https://www.sentinelone.com/vulnerability-database/cve-2026-40062/
CVE-2026-40062: Ziostation2 Path Traversal Vulnerability
Apr 23, 2026 - CVE-2026-40062 is a path traversal vulnerability in Ziostation2. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycve
https://www.sentinelone.com/vulnerability-database/cve-2026-74859/
CVE-2026-74859: gnome-tweaks Path Traversal Vulnerability
Sep 9, 2026 - CVE-2026-74859 is a path traversal vulnerability in gnome-tweaks shell theme installer. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycvegnometweaks
https://blog.cybersamir.com/path-traversal-explained/
Path Traversal Explained - Cyber Samir
Jan 9, 2026 - Understanding and exploiting directory traversal vulnerabilities
path traversalexplainedcybersamir
https://advisories.gitlab.com/npm/coursevault-preview/CVE-2026-35613/
coursevault-preview has a path traversal due to improper base-directory boundary validation |...
CVE-2026-35613 coursevault-preview has a path traversal due to improper base-directory boundary validation: coursevault-preview versions prior to 0.1.1 contain...
has apath traversaldue topreviewimproper
https://devhub.checkmarx.com/cve-details/cve-2008-7064/
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - CVE-2008-7064 -...
Directory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as used in QSF Portal before 1.4.5, when...
of adirectory pathimproperlimitationpathname
https://www.sentinelone.com/vulnerability-database/cve-2026-9138/
CVE-2026-9138: Langflow Path Traversal Vulnerability
Sep 10, 2026 - CVE-2026-9138 is a path traversal vulnerability in Langflow 1.0.0-1.11.2. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycve
https://advisories.gitlab.com/npm/n8n-mcp/GHSA-8g7g-hmwm-6rv2/
n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure |...
GHSA-8g7g-hmwm-6rv2 n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure: n8n-mcp versions before 2.50.1 contained three...
path traversalmcpaffectedredirectfollowing
https://www.sentinelone.com/vulnerability-database/cve-2026-85706/
CVE-2026-85706: GitLab Path Traversal Vulnerability
Sep 14, 2026 - CVE-2026-85706 is a path traversal vulnerability in GitLab CE/EE. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycvegitlab
https://www.sentinelone.com/vulnerability-database/cve-2025-6795/
CVE-2025-6795: Marvell QConvergeConsole Path Traversal
Jul 14, 2025 - CVE-2025-6795 is a path traversal vulnerability in Marvell QConvergeConsole. Learn about its impact, affected versions, and mitigation methods.
path traversalcvemarvell
https://cvepremium.circl.lu/cwe/CWE-27
CWE-27 - Path Traversal: 'dir/../../filename'
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
path traversalcwedirfilename
https://0daynews.com/cve/cve-2024-57728/
CVE-2024-57728 — SimpleHelp Path Traversal Vulnerability — 0dayNews
SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip…
path traversal vulnerabilitycve
https://www.sourcery.ai/vulnerabilities/python-flask-security-injection-path-traversal-open
Flask Path Traversal via open() Function | Security Vulnerability Database | Sourcery
The Flask application uses the open() function with user-controlled file paths without proper validation, enabling path traversal attacks. Attackers can...
path traversalopen functionsecurity vulnerabilityflaskvia
https://jvn.jp/en/jp/JVN20829034/index.html
JVN#20829034: a-blog cms vulnerable to path traversal
Japan Vulnerability Notes
path traversaljvnblogcmsvulnerable
https://www.plexicus.ai/cwe/cwe-27-path-traversal-dir-filename/
CWE-27: Path Traversal: 'dir/../../filename' — Plexicus
This vulnerability occurs when an application builds file paths using user input but fails to properly block sequences like 'dir/../../filename'. Attackers…
path traversalcwedirfilename
https://codesignal.com/learn/courses/multidimensional-arrays-and-their-traversal-in-csharp/lessons/path-traversal-in-2d-arrays-using-csharp
Path Traversal in 2D Arrays Using C# | CodeSignal Learn
This lesson dives into the traversal of 2D arrays in C#, focusing on a specific pattern where movement is only allowed to adjacent cells with higher values....
path traversalarraysusingcodesignallearn
https://advisories.gitlab.com/npm/vite/CVE-2026-39365/
Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling | GitLab Advisory Database...
CVE-2026-39365 Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling: Any files ending with .map even out side the project can be returned to the...
path traversalvitevulnerableoptimizeddeps
https://www.prismor.dev/blog/jspdf-path-traversal-cve-2025-68428
Critical Path Traversal Vulnerability in jsPDF Library (CVE-2025-68428) | Prismor Security Blog
Jan 6, 2026 - A critical local file inclusion vulnerability in jsPDF allows attackers to read arbitrary files from the server file system through unsanitized path parameters...
path traversal vulnerabilitysecurity blogcriticallibrarycve
https://codeant.ai/vulnerability-database/cve-2026-74884
Path Traversal (CWE-73) in openssl_encrypt Plugin Config
CVE-2026-74884 is a high-severity path traversal flaw in openssl_encrypt that lets attackers access arbitrary directories by manipulating plugin IDs directly.
path traversalcweopensslencryptplugin
https://advisories.gitlab.com/gem/yard/CVE-2026-41493/
yard: Possible arbitrary path traversal and file access via yard server | GitLab Advisory Database...
path traversalfile accessyardpossiblearbitrary
https://www.sentinelone.com/vulnerability-database/cve-2025-69077/
CVE-2025-69077: Hobo Theme Path Traversal Vulnerability
Jan 22, 2026 - CVE-2025-69077 is a path traversal vulnerability in AncoraThemes Hobo theme. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycvehobotheme
https://www.sentinelone.com/vulnerability-database/cve-2026-77269/
CVE-2026-77269: MCP Atlassian Path Traversal Vulnerability
Sep 23, 2026 - CVE-2026-77269 is a path traversal vulnerability in MCP Atlassian server. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycvemcpatlassian
https://www.sentinelone.com/vulnerability-database/cve-2026-15095/
CVE-2026-15095: WooCommerce CTX Feed Path Traversal Flaw
Sep 22, 2026 - CVE-2026-15095 is a path traversal vulnerability in WooCommerce CTX Feed plugin. Learn about its impact, affected versions, and mitigation methods.
path traversalcvewoocommercectxfeed
https://hackhalt.com/threat/cve-2025-28945-allows-php-local-file-inclusion/
valen allows PHP Local File Inclusion - Path Traversal (CVE-2025-28945)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Valen - Sport, Fashion…
local file inclusionpath traversalvalenallowsphp
https://advisories.gitlab.com/composer/froxlor/froxlor/CVE-2026-41228/
Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote...
CVE-2026-41228 Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote Code Execution: The Froxlor API endpoint...
local file inclusionpath traversallanguage parameterleads tofroxlor
https://www.sentinelone.com/vulnerability-database/cve-2020-3187/
CVE-2020-3187: Cisco Firepower Path Traversal Flaw
Nov 21, 2024 - CVE-2020-3187 is a path traversal vulnerability in Cisco Firepower Threat Defense. Learn about its impact, affected versions, and mitigation methods.
cisco firepowerpath traversalcveflaw
https://infiltr8.io/redbook/web-pentesting/web-vulnerabilities/server-side/file-inclusion/
File Inclusion & Path Traversal | The Red-Book
the red bookpath traversalfileinclusion
https://advisories.gitlab.com/golang/github.com/go-git/go-git/v4/CVE-2023-49569/
Relative Path Traversal | GitLab Advisory Database (GLAD)
CVE-2023-49569 Relative Path Traversal: Relative Path Traversal in github.com/go-git/go-git/v4.
relative pathtraversalgitlabadvisorydatabase
https://www.ionix.io/threat-center/cve-2026-79707/
CVE-2026-79707 – Unauthenticated Arbitrary File Read (Path Traversal) – Google Agent Development...
Sep 9, 2026 - CVE-2026-79707 is a path traversal vulnerability in the builder endpoint of Google Cloud's Agent Development Kit (ADK) for Python. An unauthenticated remote...
arbitrary file readpath traversalcveunauthenticatedgoogle
https://orbisappsec.com/blog/how-path-traversal-in-open-happens-in-python-and-how-to-fix
Python open() Path Traversal: Detection & Fix | Orbis AppSec
Jun 6, 2026 - Unsanitized input in Python's open() enables arbitrary file reads. Learn how this high-severity path traversal works and how directory validation stops it.
path traversalpythonopendetectionfix
https://www.sentinelone.com/vulnerability-database/cve-2025-4186/
CVE-2025-4186: Wangshen SecGate 3600 Path Traversal Flaw
Jun 17, 2026 - CVE-2025-4186 is a path traversal vulnerability in Wangshen SecGate 3600. Learn about its impact, affected versions, and mitigation methods.
path traversalcveflaw
https://devhub.checkmarx.com/cve-details/cve-2011-4532/
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - CVE-2011-4532 -...
Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation...
of adirectory pathimproperlimitationpathname
https://devhub.checkmarx.com/cve-details/cve-2011-4713/
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - CVE-2011-4713 -...
Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the...
of adirectory pathimproperlimitationpathname
https://www.fujifilm.com/fb/en/news/15736e
Notice Regarding Path Traversal Vulnerability in FUJIFILM Multifunction Devices and Printers |...
path traversal vulnerabilitynoticeregardingfujifilmmultifunction
https://www.sentinelone.com/vulnerability-database/cve-2025-69379/
CVE-2025-69379: Upload Files Anywhere Path Traversal
Feb 25, 2026 - CVE-2025-69379 is a path traversal vulnerability in Upload Files Anywhere plugin. Learn about its impact, affected versions, and mitigation methods.
upload filespath traversalcveanywhere
https://advisories.gitlab.com/pypi/accelerate/CVE-2026-69112/
Accelerate path traversal and denial of service via sharded checkpoint weight_map entries | GitLab...
CVE-2026-69112 Accelerate path traversal and denial of service via sharded checkpoint weight_map entries: Hugging Face Accelerate through 1.14.0 contains a...
denial of servicepath traversalweight mapacceleratevia
https://www.immunitysec.com/vulnerabilities/cve-2019-7195/
CVE-2019-7195: QNAP Photo Station Path Traversal Vulnerability
Oct 21, 2025 - CVE-2019-7195: This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the…
path traversal vulnerabilitycveqnapphotostation
https://devhub.checkmarx.com/cve-details/cve-2017-17058/
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in...
Jan 9, 2023 - ** DISPUTED ** The WooCommerce plugin for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI,...
of adirectory pathimproperlimitationpathname
https://docs.pingidentity.com/java-agents/2025.11/properties-reference/org.forgerock.agents.reject.path.traversal.attempts.enabled.html
Control Handling of Path Traversal Attempts | Java Agents
When set to true any incoming URL containing a path segment of .. will cause the incoming request to be rejected with an HTTP 400 response.
path traversalcontrolhandlingattemptsjava
https://blog.webverselabs-pro.com/challenges/mapleton/
Mapleton Writeup — LFI via Path Traversal | WebVerse Daily Challenge
May 17, 2026 - Mapleton walkthrough: traverse out of a legacy PHP realtor's templating into /etc/passwd and the realtor's home directory. WebVerse Pro daily LFI challenge...
path traversaldaily challengemapletonwriteuplfi
https://advisories.gitlab.com/cargo/onenote_parser/CVE-2026-46671/
Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside...
CVE-2026-46671 Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory: A maliciously crafted...
path traversalrustonenotefileparser
https://www.sentinelone.com/vulnerability-database/cve-2026-15801/
CVE-2026-15801: CRI-O Path Traversal Vulnerability
Sep 22, 2026 - CVE-2026-15801 is a path traversal vulnerability in CRI-O container runtime. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycvecri
https://cvefeed.io/cwe/detail/cwe-26-path-traversal-dirfilename
CWE-26: Path Traversal: '/dir/../filename'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "/dir/../filename"...
path traversalcwedirfilename
https://advisories.gitlab.com/gem/mail/CVE-2012-2139/
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | GitLab Advisory...
CVE-2012-2139 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'): Directory traversal vulnerability in...
of adirectory pathimproperlimitationpathname
https://bugzilla.redhat.com/show_bug.cgi?id=2520695
2520695 – (CVE-2026-53584) CVE-2026-53584 libgit2: libgit2: Submodule path traversal allows...
path traversalcvesubmoduleallows
https://cybersecuritystash.com/news/adobe-coldfusion-cve-2026-48282-kev-path-traversal-triage
Adobe ColdFusion CVE-2026-48282 KEV: Path-Traversal RCE Triage for Defenders | Cybersecurity Stash...
CISA added Adobe ColdFusion CVE 2026 48282 to KEV on July 7, 2026 after Adobe confirmed limited in the wild exploitation. ColdFusion 2025 Update 9 and...
adobe coldfusionpath traversalcvekevrce
https://advisories.gitlab.com/maven/org.openrefine/openrefine/CVE-2024-49760/
OpenRefine has a path traversal in LoadLanguageCommand | GitLab Advisory Database (GLAD)
CVE-2024-49760 OpenRefine has a path traversal in LoadLanguageCommand: The load-language command expects a lang parameter from which it constructs the path of...
has apath traversalopenrefinegitlabadvisory
https://watchtowr.com/intelligence/rapid-reaction-gitlab-critical-path-traversal-vulnerability-cve-2026-85706/
GitLab Path Traversal CVE-2026-85706 | watchTowr
Sep 18, 2026 - watchTowr Intel is observing in-the-wild probes for the GitLab Path Traversal flaw CVE-2026-85706, letting attackers read arbitrary files in one request.
path traversalgitlabcvewatchtowr
https://mcz3n.com/bug%20bounty/reports/path-traversal
mcz3n | Path Traversal
A collection of Path Traversal write-ups and report
path traversal
https://www.thesmartscanner.com/vulnerability-list/langchain-path-traversal-vulnerability
Langchain Path Traversal vulnerability - CVE-2024-7774 | SmartScanner | Web Security
A path traversal vulnerability exists in the getFullPath method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to s...
path traversal vulnerabilityweb securitylangchaincve
https://supremespy.com/spy-tech-tools-2/wordpress-unauthenticated-path-traversal-leading-to-conditional-rce/
WordPress: Unauthenticated Path Traversal Leading To Conditional RCE - Supreme Spy
Sep 23, 2026 - Security researchers have identified an unauthenticated path traversal flaw in WordPress, potentially leading to remote code execution under certain conditions.
path traversalleading towordpressunauthenticatedconditional
https://www.openwall.com/lists/oss-security/2026/04/11/3
oss-security - [kubernetes] CVE-2026-3865: CSI Driver for SMB path traversal via subDir may delete...
path traversalosssecuritykubernetescve
https://certvde.com/en/advisories/VDE-2025-015
CODESYS Control V3 removable media path traversal
removable mediapath traversalcodesyscontrol
https://codeant.ai/vulnerability-database/cve-2026-91751
Path Traversal (CWE-22) in Flextype Entries REST API
Flextype CMS contains a path traversal flaw in its Entries REST API, letting API token holders read, create, or overwrite files beyond the entries directory.
path traversalrest apicweentries
https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/report-info/CVE-2024-5273/
Jenkins Report Info Plugin Path Traversal vulnerability | GitLab Advisory Database (GLAD)
CVE-2024-5273 Jenkins Report Info Plugin Path Traversal vulnerability: Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the...
path traversal vulnerabilityjenkins reportinfoplugingitlab
https://docs.moderne.io/openrewrite-advanced-program-analysis/security/path-traversal/
Path traversal detection | Moderne Docs
Detect and prevent path traversal vulnerabilities in file system operations.
path traversaldetectionmodernedocs
https://www.penscan.org/blog/path-traversal-cwe-26/
What is Path Traversal (CWE-26)?
Jul 27, 2026 - Path Traversal (CWE-26) occurs when a web application uses external input to construct a pathname that resolves outside of a restricted directory, leading...
what ispath traversalcwe
https://ics-cert.kaspersky.ru/advisories/2023/11/08/klcert-22-211-telit-cinterion-thales-gemalto-modules-relative-path-traversal
KLCERT-22-211: Telit Cinterion (Thales/Gemalto) modules. Relative Path Traversal | Kaspersky ICS...
A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81,...
telit cinterionrelative paththalesgemaltomodules
https://db.fluidattacks.com/rul/SAST-VESSF/
Javascript Path Traversal Vulnerability Express | Fluid Attacks Database
Javascript: Detects path traversal vulnerabilities in Express.js applications where user-controlled input could be used to access files outside the…
path traversal vulnerabilityfluid attacksjavascriptexpressdatabase
https://news.whitewallet.app/breaking/langflow-cve-2026-5027-path-traversal-active-exploit/
Active exploitation of Langflow bug CVE-2026-5027 path-traversal
Jun 10, 2026 - Unpatched Langflow path-traversal CVE-2026-5027 lets attackers write files via POST /api/v2/files, enabling unauthenticated RCE; ~7,000 instances exposed.
path traversalactiveexploitationbugcve
https://o3.security/vulnerability/CVE-2026-102811
CVE-2026-102811: marmite Path Traversal
Oct 2, 2026 - CVE-2026-102811 is a security vulnerability. It affects marmite. Marmite through 0.4.2 Unauthenticated API Access via Development Server See affected…
path traversalcvemarmite
https://leibling.de/cve-2025-12638-path-traversal-vulnerability-in-keras-team-keras-via-tar-archive-extraction-in-keras-utils-get_file/
CVE-2025-12638 Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in...
path traversal vulnerabilitytar archivecvekerasteam
https://cyberthreatintelligence.net/cve/CVE-2021-26086
CVE-2021-26086 — Atlassian Jira Server and Data Center Path Traversal Vulnerability | Cyber Threat...
Oct 12, 2026 - CVE-2021-26086 — Atlassian Jira Server and Data Center Path Traversal Vulnerability. Affects Atlassian Jira Server and Data Center. Rated MEDIUM (CVSS 5.3)....
path traversal vulnerabilityatlassian jiradata centercyber threatcve
https://www.sentinelone.com/vulnerability-database/cve-2026-14975/
CVE-2026-14975: WP File Download Path Traversal Vulnerability
Sep 8, 2026 - CVE-2026-14975 is a path traversal vulnerability in WP File Download plugin for WordPress. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycvefiledownload
https://www.sentinelone.com/vulnerability-database/cve-2025-26355/
CVE-2025-26355: Q-free Maxtime Path Traversal Vulnerability
Jun 17, 2026 - CVE-2025-26355 is a path traversal vulnerability in Q-free Maxtime. Learn about its impact, affected versions, and mitigation methods.
path traversal vulnerabilitycvefreemaxtime
https://www.stackzero.net/tag/path-traversal/
path traversal Archivi - StackZero
In this article, we will be exploring the ins and outs of file inclusion vulnerability exploitation. We will cover what
path traversalarchivi
https://www.sentinelone.com/vulnerability-database/cve-2025-60050/
CVE-2025-60050: Axiomthemes Panda Path Traversal Flaw
Apr 27, 2026 - CVE-2025-60050 is a path traversal vulnerability in Axiomthemes Panda. Learn about its impact, affected versions, and mitigation methods.
path traversalcveaxiomthemespandaflaw