CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ClickMigrate has Path Traversal in "revision -m" argument

copyparty FTP: upload outside defined volumes (limited path traversal)

Nginx UI: Auto backup name allows path traversal outside validated storage path

netlicensing-mcp: REST Path Traversal Bypasses Token Redaction

GitHub CLI allows path traversal through unescaped request URL components

BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction

Shiny for Python has path traversal in bookmark restore

Contao: Path traversal in the images controller

pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)

Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

Duplicate Advisory: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace

Duplicate Advisory: PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace

datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

PraisonAI: Project custom command templates can read outside-workspace files into model prompts

Duplicate Advisory: PraisonAI: Project custom command templates can read outside-workspace files into model prompts

PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

Duplicate Advisory: PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace

Duplicate Advisory: PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace

PraisonAI: Project config can auto-save agent output outside the project root

Duplicate Advisory: PraisonAI: Project config can auto-save agent output outside the project root

Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Payload: Incomplete validation during the upload file lifecycle