Skip to content
OpenAdvisories

Vendor

BuilderIO

6 known vulnerabilities.

Products

builderio/qwik 3 @builder.io/sdk-react 2 @builder.io/sdk-vue 2 @builder.io/sdk-svelte 2 @builder.io/sdk-solid 2 @builder.io/sdk-qwik 2 @builder.io/sdk-angular 2 @builder.io/sdk-react-nextjs 2 gpt-crawler 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-82286 Public exploit

    gpt-crawler Arbitrary File Write via outputFileName Parameter

    gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segments to overw…

    BuilderIO gpt-crawler