Rojo development server vulnerable to DNS rebinding, allowing unauthenticated read/write access and local program execution

Path traversal in apimock's file-serving fallback

Path traversal in apimock-server's file-serving fallback

Relative/Absolute Path Traversal (CWE-23/CWE-36) in decompress_impl that enables an arbitrary file write.

Debug output exposes NIP-46 and NIP-60 credentials

OCI layer symlink escape → arbitrary host write

PAX Header Desynchronization in astral-tokio-tar

unpack_in can chmod arbitrary directories by following symlinks

Multiple issues involving quote API

sudo-rs: Path Traversal vulnerability

openssl SubjectAlternativeName and ExtendedKeyUsage::other allow arbitrary file read

Improper validation of Windows paths could lead to directory traversal attack

Improper validation of Windows paths could lead to directory traversal attack

Improper validation of Windows paths could lead to directory traversal attack

Time-of-check time-of-use race condition can allow attacker to delete files they do not have access to delete

RustEmbed generated get method allows for directory traversal when reading files from disk

File exposure in pleaser

Relative Path Traversal in git-delta

Argument injection in sendmail transport