CWE-59

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components

Tanium addressed an improper link resolution before file access vulnerability in Enforce.

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a l

Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability ex

An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) with

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with frien

Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to e

util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vuln

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows an attacker to bypass

When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file'

The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper tha

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an

rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows atta

Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem co

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-

A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validate_path of th

A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confin

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.exter

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names du

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_status of the file c

Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/Exp

Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_

Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without O_EXCL o

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O_EXCL

Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL

Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EX

Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EX

Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_E

Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL

Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_

LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project

OpenClaw versions prior to 2026.2.22 contain a path traversal vulnerability in the static file handler that follows symb

A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0. The affected element is the function assertPathA

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to mis

ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operatio

Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL o

Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL

ciguard is a static security auditor for CI/CD pipelines. From 0.8.0 to 0.8.1 , the discover_pipeline_files() function i

BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it fa

File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When th

The github_workflows module constructs local directory paths from user-controlled repository names without validating fo

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user ac