CWE-59 Improper Link Resolution Before File Access ('Link Following')

Appium: Symlink based Zip Slip in @appium/support ZIP extraction

borg extract might modify out-of-tree files when extracting maliciously crafted archives

Terragrunt catalog predictable temp symlink clobber

BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction

Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability

Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied

Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions

Backstage: Improper task state validation in Scaffolder backend

Backstage has potential file exposure through local TechDocs publisher

Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protections

Dulwich: Symlink directory traversal in filter-branch index_filter via cross-commit state persistence

Dulwich: Symlink directory traversal in stash pop allows arbitrary file write via intermediate directory symlinks

Tornado: StaticFileHandler follows symlinks outside static root (path traversal)

@xhmikosr/decompress: Path traversal via symlink chain

oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)

rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite

ONNX: TOCTOU arbitrary file read/write in save_external_dat

Infracost: Arbitrary file read via config-template readFile symlink traversal

NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement

NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely

NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)