Robuta

https://advisories.gitlab.com/npm/jspdf/CVE-2025-68428/ jsPDF has Local File Inclusion/Path Traversal vulnerability | GitLab Advisory Database (GLAD) CVE-2025-68428 jsPDF has Local File Inclusion/Path Traversal vulnerability: User control of the first argument of the loadFile method in the node.js build... local file inclusionpath traversal https://www.sentinelone.com/vulnerability-database/cve-2024-48248/ CVE-2024-48248: NAKIVO Backup Path Traversal Vulnerability path traversalcvenakivobackupvulnerability https://www.sentinelone.com/vulnerability-database/cve-2025-48130/ CVE-2025-48130: Spice Blocks Path Traversal Vulnerability CVE-2025-48130 is a path traversal vulnerability in Spice Blocks plugin. Learn about its impact, affected versions, and mitigation methods. path traversalcvespiceblocksvulnerability https://www.levelblue.com/blogs/spiderlabs-blog/stonefly-sc-vulnerability-disclosure/?collection=5b76135e-4196-415b-ab1d-f42b6f0abb10&parentUrl=/en/insights/articles/how-to-make-the-most-of-voluntary-benefit-plans-in-the-us Command Injection and Path Traversal in StoneFly Storage Concentrator CVE-2024-30213, CVE-2024-31947: Blind Operating System Command Injection and Path Traversal in StoneFly Storage Concentrator command injectionpath traversalstoneflystorageconcentrator https://www.miggo.io/vulnerability-database/cve/CVE-2023-1177 CVE-2023-1177: MLflow Server Path Traversal | Miggo MLflow path traversal in server and ui CLIs grants remote attackers arbitrary file download from the host via a malicious request to the artifacts API. path traversalcvemlflowserver https://intruceptlabs.com/2025/08/winrar-zero-day-path-traversal-flaw-actively-exploited-to-code-execution/ WinRAR Zero-Day Path Traversal Flaw Actively Exploited to Code Execution - Intrucept Aug 11, 2025 - Security advisory: A zero-day path traversal vulnerability has been discovered in the Windows version of a popular file archiver utility, WinRAR. The... zero daypath traversal https://www.sentinelone.com/vulnerability-database/cve-2026-33227/ CVE-2026-33227: Apache ActiveMQ Path Traversal Flaw CVE-2026-33227 is a path traversal vulnerability in Apache ActiveMQ. Learn about its impact, affected versions, and mitigation methods. apache activemqpath traversalcveflaw https://www.confoo.ca/en/2026/session/csrf-are-back-with-client-side-path-traversal CSRF are back with Client-Side Path Traversal | ConFoo.ca FullStack Conference for developers February 25-27, 2026 in Montreal, Canada. client sidepath traversalcsrfbackconfoo https://advisories.gitlab.com/golang/github.com/hashicorp/go-getter/CVE-2022-30322/ Relative Path Traversal | GitLab Advisory Database (GLAD) CVE-2022-30322 Relative Path Traversal: HashiCorp go-getter through 2.0.2 does not safely perform downloads (issue 2 of 3). path traversalrelativegitlabadvisorydatabase https://advisories.gitlab.com/golang/github.com/arduino/arduino-create-agent/CVE-2023-43803/ Arduino Create Agent path traversal - arbitrary file deletion vulnerability | GitLab Advisory... CVE-2023-43803 Arduino Create Agent path traversal - arbitrary file deletion vulnerability: Arduino Create Agent is a package to help manage Arduino... create agentpath traversalfile deletionarduino https://advisories.gitlab.com/composer/froxlor/froxlor/CVE-2023-0316/ Path Traversal: '\..\filename' | GitLab Advisory Database (GLAD) CVE-2023-0316 Path Traversal: '\..\filename': Path Traversal: '..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0. path traversalfilenamegitlabadvisorydatabase https://www.sentinelone.com/vulnerability-database/cve-2025-32294/ CVE-2025-32294: Oxpitan Path Traversal Vulnerability CVE-2025-32294 is a path traversal vulnerability in Oxpitan allowing PHP local file inclusion. Learn about its impact, affected versions, and mitigation... path traversalcvevulnerability https://advisories.gitlab.com/swift/github.com/weichsel/zipfoundation/CVE-2023-39138/ Path traversal in ZIPFoundation | GitLab Advisory Database (GLAD) CVE-2023-39138 Path traversal in ZIPFoundation: An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip... path traversalgitlabadvisorydatabaseglad https://cvefeed.io/vuln/detail/CVE-2009-3053 CVE-2009-3053 - Agora Joomla! Path Traversal Valeuth Apr 23, 2026 - Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files... path traversalcveagorajoomla https://research.jfrog.com/vulnerabilities/archiver-zip-slip/ mholt/archiver Zip Slip Path Traversal | - JFrog Security Research CVE-2025-3445 High severity. mholt/archiver Zip Slip Path Traversal path traversalarchiverzipslipjfrog https://advisories.gitlab.com/pypi/pghoard/CVE-2024-56142/ PGHoard Path Traversal vulnerability | GitLab Advisory Database (GLAD) CVE-2024-56142 PGHoard Path Traversal vulnerability: A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges... path traversalvulnerabilitygitlabadvisorydatabase https://advisories.gitlab.com/maven/org.glassfish.main.web/web/CVE-2022-2712/ Relative Path Traversal | GitLab Advisory Database (GLAD) CVE-2022-2712 Relative Path Traversal: In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not... path traversalrelativegitlabadvisorydatabase https://advisories.gitlab.com/pypi/diffoscope/CVE-2024-25711/ diffoscope Path Traversal vulnerability | GitLab Advisory Database (GLAD) CVE-2024-25711 diffoscope Path Traversal vulnerability: diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of... path traversaldiffoscopevulnerabilitygitlabadvisory https://advisories.gitlab.com/composer/magento/community-edition/CVE-2025-49559/ Magento vulnerable to path traversal | GitLab Advisory Database (GLAD) CVE-2025-49559 Magento vulnerable to path traversal: Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are... path traversalmagentovulnerablegitlabadvisory https://www.sentinelone.com/vulnerability-database/cve-2026-3666/ CVE-2026-3666: wpForo Forum Path Traversal Vulnerability CVE-2026-3666 is a path traversal vulnerability in wpForo Forum for WordPress. Learn about its impact, affected versions, and mitigation methods. wpforo forumpath traversalcvevulnerability https://docs.gitlab.com/ja-jp/user/application_security/api_security_testing/checks/path_traversal_check/ Path traversal | GitLab Docs GitLab product documentation. path traversalgitlabdocs https://advisories.gitlab.com/golang/github.com/openshift/console/CVE-2024-7631/ OpenShift Console Has a Path Traversal Vulnerability | GitLab Advisory Database (GLAD) CVE-2024-7631 OpenShift Console Has a Path Traversal Vulnerability: A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in... path traversalopenshiftconsole https://advisories.gitlab.com/npm/@janhq/core/CVE-2024-36858/ Jan path traversal vulnerability | GitLab Advisory Database (GLAD) CVE-2024-36858 Jan path traversal vulnerability: An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers... path traversaljanvulnerabilitygitlabadvisory https://advisories.gitlab.com/golang/github.com/siyuan-note/siyuan/kernel/CVE-2026-32749/ SiYuan importSY/importZipMd: path traversal via multipart filename enables arbitrary file write |... CVE-2026-32749 SiYuan importSY/importZipMd: path traversal via multipart filename enables arbitrary file write: POST /api/import/importSY and POST... path traversal https://www.sentinelone.com/vulnerability-database/cve-2025-49448/ CVE-2025-49448: FW Food Menu Path Traversal Flaw CVE-2025-49448 is a path traversal vulnerability in FW Food Menu plugin. Learn about its impact, affected versions, and mitigation methods. food menupath traversalcvefwflaw https://advisories.gitlab.com/pypi/zenml/CVE-2025-8406/ ZenML is vulnerable to Path Traversal through its `PathMaterializer` class | GitLab Advisory... CVE-2025-8406 ZenML is vulnerable to Path Traversal through its `PathMaterializer` class: ZenML version 0.83.1 is affected by a path traversal vulnerability in... path traversal https://www.sentinelone.com/vulnerability-database/cve-2026-0976/ CVE-2026-0976: Keycloak Path Traversal Vulnerability CVE-2026-0976 is a path traversal vulnerability in Keycloak. Learn about its impact, affected versions, and mitigation methods to secure your systems. path traversalcvekeycloakvulnerability https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-setelsa-security-conacwin Relative path traversal in Setelsa Security ConacWin CB | INCIBE-CERT | INCIBE INCIBE has coordinated the publication of a vulnerability affecting Setelsa Security ConacWin CB, an a path traversalrelativesecuritycbincibe https://advisories.gitlab.com/pypi/praisonaiagents/CVE-2026-40152/ PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace... CVE-2026-40152 PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary: The list_files() tool in FileTools... path traversal https://securityvulnerability.io/vulnerability/CVE-2025-34028 CVE-2025-34028 : Path Traversal Vulnerability in Commvault Command Center by Commvault Feb 26, 2026 - A path traversal flaw in Commvault Command Center allows ZIP file uploads leading to Remote Code Execution. Learn about CVE-2025-34028. path traversalcommand centercve https://securityvulnerability.io/vulnerability/CVE-2024-13181 CVE-2024-13181 : Path Traversal Vulnerability in Ivanti Avalanche Software Jan 17, 2025 - Remote attackers can exploit a path traversal vulnerability in Ivanti Avalanche, compromising system security. Learn more about CVE-2024-13181. path traversalcvevulnerabilityivantiavalanche https://www.sentinelone.com/vulnerability-database/cve-2026-35356/ CVE-2026-35356: uutils coreutils Path Traversal Flaw CVE-2026-35356 is a path traversal vulnerability in uutils coreutils install utility. Learn about its impact, affected versions, and mitigation methods. path traversalcvecoreutilsflaw https://s4e.io/tools/belkin-n150-router-1-00-08-1-00-09-directory-traversal-cve-2014-2962 CVE-2014-2962 scanner - Path Traversal vulnerability in Belkin N150 F9K1009 Detects 'Path Traversal' vulnerability in Belkin N150 F9K1009 affects v. 1. path traversalcvescanner https://www.sentinelone.com/vulnerability-database/cve-2026-39306/ CVE-2026-39306: PraisonAI Path Traversal Vulnerability CVE-2026-39306 is a path traversal vulnerability in PraisonAI. Learn about its impact, affected versions, and mitigation methods. path traversalcvevulnerability https://www.sentinelone.com/vulnerability-database/cve-2026-6903/ CVE-2026-6903: LabOne Web Server Path Traversal Flaw CVE-2026-6903 is a path traversal vulnerability in LabOne Web Server. Learn about its impact, affected versions, and mitigation methods. web serverpath traversalcvelaboneflaw https://www.sentinelone.com/vulnerability-database/cve-2026-35446/ CVE-2026-35446: LORIS Path Traversal Vulnerability CVE-2026-35446 is a path traversal vulnerability in LORIS (Longitudinal Online Research and Imaging System). Learn about its impact, affected versions, and... path traversalcvelorisvulnerability https://www.sentinelone.com/vulnerability-database/cve-2026-34783/ CVE-2026-34783: Ferret Path Traversal Vulnerability CVE-2026-34783 is a path traversal vulnerability in Ferret's IO::FS::WRITE function. Learn about its impact, affected versions, and mitigation methods. path traversalcveferretvulnerability https://ranakhalil.com/courses/directory-traversal/lectures/52039996 Lab #2 File path traversal, traversal sequences blocked with absolute Learn how to find, exploit and defend against Directory Traversal vulnerabilities. path traversallabfilesequencesblocked https://research.averlon.ai/vulnerability-intelligence/cve/CVE-2020-35883 CVE-2020-35883: Path traversal in mozwire - Averlon Vulnerability Intelligence An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at... path traversalcvevulnerabilityintelligence https://www.sentinelone.com/vulnerability-database/cve-2025-13282/ CVE-2025-13282: Cht Tenderdoctransfer Path Traversal Flaw CVE-2025-13282 is a path traversal vulnerability in Cht Tenderdoctransfer. Learn about its impact, affected versions, and mitigation methods. path traversalcvechtflaw https://advisories.gitlab.com/pypi/mage-ai/CVE-2024-45190/ Mage AI Path Traversal vulnerability | GitLab Advisory Database (GLAD) CVE-2024-45190 Mage AI Path Traversal vulnerability: Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a... ai pathmagetraversalvulnerabilitygitlab https://advisories.gitlab.com/composer/topthink/framework/CVE-2025-50706/ ThinkPHP Path Traversal Vulnerability | GitLab Advisory Database (GLAD) CVE-2025-50706 ThinkPHP Path Traversal Vulnerability: An issue in ThinkPHP Framework v.5.1 allows a remote attacker to execute arbitrary code via the... path traversalthinkphpvulnerabilitygitlabadvisory https://advisories.gitlab.com/golang/github.com/yi-ge/unzip/CVE-2020-36561/ Unzip vulnerable to path traversal | GitLab Advisory Database (GLAD) CVE-2020-36561 Unzip vulnerable to path traversal: Due to improper path santization, archives containing relative file paths can cause files to be written (or... path traversalunzipvulnerablegitlabadvisory https://advisories.gitlab.com/maven/org.apache.streampark/streampark-common_2.12/CVE-2022-45802/ Apache StreamPark Path Traversal vulnerability | GitLab Advisory Database (GLAD) CVE-2022-45802 Apache StreamPark Path Traversal vulnerability: Streampark allows any users to upload a jar as application, but there is no mandatory... path traversalapachevulnerabilitygitlabadvisory https://neutsec.io/advisories/cve-2025-64075/ Authentcation bypass via path traversal | Neutrino Security path traversalbypassvianeutrinosecurity https://www.sentinelone.com/vulnerability-database/cve-2024-10834/ CVE-2024-10834: DB-GPT Path Traversal Vulnerability CVE-2024-10834 is a path traversal vulnerability in DB-GPT 0.6.0. Learn about its impact, affected versions, and mitigation methods. path traversalcvedbgptvulnerability https://www.devsecopsnow.com/path-traversal/ What is path traversal? Meaning, Examples, Use Cases & Complete Guide - DevSecOps Now!!! what is path https://advisories.gitlab.com/pypi/gdown/GHSA-76hw-p97h-883f/ gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall | GitLab Advisory... GHSA-76hw-p97h-883f gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall: The gdown library (tested on v5.2.1) is vulnerable to a Path... https://update.cybetower.swiss/cve-2025-26876-codemanas-search-with-typesense-plugin-up-to-2-0-8-on-wordpress-path-traversal/ CVE-2025-26876 | CodeManas Search with Typesense Plugin up to 2.0.8 on WordPress path traversal -... Feb 25, 2025 - This vulnerability is uniquely identified as CVE-2025-26876. It is possible to initiate the attack remotely. There is no exploit available. https://www.endorlabs.com/vulnerability/cve-2026-28482 Endor Patches | CVE-2026-28482, OpenClaw's unsanitized session ID enables path traversal in... https://advisories.gitlab.com/pypi/dbt-common/GHSA-w75w-9qv4-j5xj/ dbt-common's commonprefix() doesn't protect against path traversal | GitLab Advisory Database (GLAD) GHSA-w75w-9qv4-j5xj dbt-common's commonprefix() doesn't protect against path traversal: What kind of vulnerability is it? Who is impacted? A path traversal... https://advisories.gitlab.com/golang/github.com/go-git/go-git/v5/CVE-2023-49569/ Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients |... CVE-2023-49569 Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients: A path traversal vulnerability was discovered in... https://devhub.checkmarx.com/cve-details/cve-2014-4877/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - CVE-2014-4877 -... May 9, 2023 - Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and... https://advisories.gitlab.com/golang/github.com/jessfraz/pastebinit/CVE-2018-25059/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | GitLab Advisory... CVE-2018-25059 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'): A vulnerability was found in pastebinit up to 0.2.2 and... https://advisories.gitlab.com/npm/coursevault-preview/CVE-2026-35613/ coursevault-preview has a path traversal due to improper base-directory boundary validation |... CVE-2026-35613 coursevault-preview has a path traversal due to improper base-directory boundary validation: coursevault-preview versions prior to 0.1.1 contain... https://aisecurityguard.io/learn/article/critical-path-traversal-in-mcpservergit-cve202568145-analysi Critical Path Traversal in mcp-server-git: CVE-2025-68145 Analysis and Defense | AI Security Guard A critical vulnerability discovered in mcp-server-git versions prior to 2025.12.17 allows attackers to bypass repository access restrictions through path traver https://devhub.checkmarx.com/cve-details/cve-2018-11455/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - CVE-2018-11455 -... https://zerodai.com/en/vulnerabilities/cve/cve-2023-7300 CVE-2023-7300 [HIGH]: Huawei Home Music System has a path traversal vulnerability. Successful... Dec 26, 2024 - Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to be deleted or t... https://advisories.gitlab.com/gem/yard/CVE-2026-41493/ yard: Possible arbitrary path traversal and file access via yard server | GitLab Advisory Database... https://advisories.gitlab.com/nuget/jellyfin.controller/CVE-2023-30626/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | GitLab Advisory... CVE-2023-30626 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'): Jellyfin is a free-software media system. Versions starting with... https://www.sentinelone.com/vulnerability-database/cve-2025-48124/ CVE-2025-48124: WooCommerce Price Changer Path Traversal CVE-2025-48124 is a path traversal vulnerability in Spreadsheet Price Changer for WooCommerce. Learn about its impact, affected versions, and mitigation. cvewoocommercepricechangerpath https://devhub.checkmarx.com/cve-details/cve-2010-4801/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - CVE-2010-4801 -... May 9, 2023 - Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot... https://devhub.checkmarx.com/cve-details/cve-2023-24804/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - CVE-2023-24804 -... May 9, 2023 - The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path... https://advisories.gitlab.com/npm/@evershop/evershop/CVE-2023-46496/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | GitLab Advisory... CVE-2023-46496 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'): Directory Traversal vulnerability in EverShop NPM versions... https://manpages.ubuntu.com/manpages/xenial/man3/Math::PlanePath::SierpinskiArrowheadCentres.3pm.html Ubuntu Manpage: Math::PlanePath::SierpinskiArrowheadCentres - self-similar triangular path traversal self-similar triangular path traversal ubuntumanpagemathselfsimilar https://advisories.gitlab.com/golang/github.com/montferret/ferret/CVE-2026-34783/ Ferret: Path Traversal in IO::FS::WRITE allows arbitrary file write when scraping malicious... CVE-2026-34783 Ferret: Path Traversal in IO::FS::WRITE allows arbitrary file write when scraping malicious websites: A path traversal vulnerability in Ferret's... https://cvefeed.io/vuln/detail/CVE-2024-12088 CVE-2024-12088 - Rsync: --safe-links option bypass leads to path traversal Apr 14, 2026 - A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server... https://www.sentinelone.com/vulnerability-database/cve-2025-32627/ CVE-2025-32627: Joomsky JS Job Manager Path Traversal CVE-2025-32627 is a path traversal vulnerability in Joomsky JS Job Manager. Learn about its impact, affected versions, and mitigation methods. job managercvejspathtraversal