path-traversal

• CVE-2026-13528 - YunaiV/zhijiantianya ruoyi-vue-pro path traversal 2026-06-29
• CVE-2026-41046 - qSnapper path traversal 2026-06-29
• GHSA-QRV3-253H-G69C - pnpm path traversal 2026-06-29
• CVE-2026-49338 - gonic playlist path traversal 2026-06-27
• CVE-2026-50015 - pnpm malicious patch path traversal 2026-06-27
• CVE-2026-53519 - Nezha dashboard path traversal leaks JWT secret 2026-06-27
• CVE-2026-55697 - pnpm global bin name traversal 2026-06-27
• CVE-2026-55698 - pnpm env lockfile short-circuit 2026-06-27
• CVE-2026-55700 - pnpm stage download symlink traversal 2026-06-27
• GHSA-qrv3-253h-g69c - pnpm configDependencies symlink traversal 2026-06-27
• CVE-2026-55092 - Trivy OCI artifact title path traversal 2026-06-25
• CVE-2026-55092 - Trivy OCI artifact title path traversal arbitrary write 2026-06-25
• CVE-2026-41046 - qSnapper configName path traversal 2026-06-22
• CVE-2026-41046 - qSnapper configName path traversal privilege escalation 2026-06-22
• CVE-2026-42129 - Grafana Loki datasource callResource traversal 2026-06-22
• CVE-2026-8442 - WP Review Slider Pro arbitrary file deletion 2026-06-16
• CVE-2026-40987 - Spring Integration remote file sync arbitrary write 2026-06-15
• CVE-2025-68143 - mcp-server-git arbitrary repository creation 2026-06-11
• CVE-2025-68145 - mcp-server-git repository path validation bypass 2026-06-11
• CVE-2026-26329 - OpenClaw browser upload file read 2026-06-08
• CVE-2026-27905 - BentoML tar symlink arbitrary write 2026-06-08
• CVE-2026-34070 - LangChain load_prompt path traversal 2026-06-08
• CVE-2026-44023 - Docling Core remote filename SSRF 2026-06-08
• CVE-2026-6321 - fast-uri encoded path traversal 2026-06-08
• CVE-2026-27606 - Rollup path traversal arbitrary write 2026-06-07
• CVE-2026-40576 - excel-mcp-server path traversal 2026-06-07
• CVE-2026-47214 - Docling HTML backend URI and path handling 2026-06-07
• CVE-2026-47397 - PraisonAI arbitrary file write 2026-06-07
• CVE-2026-47669 - DbGate archive unzip arbitrary write RCE 2026-06-07
• CVE-2026-47708 - stata-mcp log_file_name command injection 2026-06-07
• CVE-2026-47731 - AIT-Core BSC path traversal file append 2026-06-07
• CVE-2026-49143 - browserstack-runner log handler RCE 2026-06-07
• GHSA-wx3m-whqv-xv47 - skillctl path and symlink traversal 2026-06-07
• CVE-2026-44336 - PraisonAI MCP tools/call path traversal RCE 2026-05-12
• CVE-2026-44340 - PraisonAI recipe symlink extraction escape 2026-05-12
• CVE-2026-44542 - FileBrowser public share DELETE path traversal 2026-05-10
• GHSA-xmxx/GHSA-mr34/GHSA-2gvc - OpenClaw gateway boundary hardening 2026-05-08
• CVE-2026-41589 - Wish SCP path traversal 2026-05-02
• GHSA-74m3 - zrok WebDAV DriveRoot symlink escape 2026-05-02