Skip to content
OpenAdvisories

Package · Maven

io.qameta.allure:allure-commandline

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.2
    CVE-2026-55846

    Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Read

    Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the HTTP server started by allure serve and allure open uses URI.getPath() in Commands.setUpServer() in allure-commandline/src/main/java/io/qameta/allu…

    allure-framework allure2 allure io.qameta.allure:allure-commandline Ubuntu Maven