Skip to content
OpenAdvisories

Product · AWS

diagram-as-code

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-81838

    Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)

    A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal se…

    AWS diagram-as-code