Everything NetSec Observer has reported about path traversal: 4 stories, newest first. Part of our Vulnerabilities coverage.
A high-severity flaw in Astral uv versions before 0.8.22 lets attackers write files outside the intended directory via crafted symlinks in source distributions.
An unauthenticated flaw in the NativeChurch theme permits attackers to traverse directories and steal sensitive configuration files from exposed servers.
Attackers can overwrite or delete JSON configuration files in Xinference 4.0.1 and earlier by injecting backslash sequences into model registration requests.
Researchers found that the XWorm RAT control panel allows attackers to overwrite system files and run code without logging in, using data found in infected clients.