Skip to content
OpenAdvisories

Vendor

colanode

1 known vulnerabilities.

Products

colanode 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-110766

    Colanode Server through 0.4.7 Path Traversal via Avatar Download Route

    Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded traversal sequence in avatarId. Attackers can send percent-encoded ../ sequences to GET /client/v1/avat…

    colanode colanode