CWE-73 External Control of File Name or Path

datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

PraisonAI: Project config can auto-save agent output outside the project root

Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Docling: Crafted DoclingDocument JSON embeds local image files into converted output

Payload: Incomplete validation during the upload file lifecycle

Ghost: Path Traversal via Locale Setting

Backstage: Improper input validation in Confluence to Markdown scaffolder module

Backstage: Improper input validation in cloud storage URL readers

Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories

Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile

Nx: Path traversal in nx migrate package-migrations extraction

GitPython submodule update path traversal can write outside the repository

Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing

Duplicate Advisory: Knowns Sandbox Escape: Unauthenticated Header Injection Grants AI Agent Unrestricted Access to Host Filesystem

Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files

MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters

@roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory

Redocly CLI: Path traversal when using `split` command

mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url

psd-tools vulnerable to arbitrary file write via smart-object filename

n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree

Nodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the legacy signature

GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython

GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()