Skip to content
OpenAdvisories

Vendor

frostming

1 known vulnerabilities.

Products

unearth 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-73030

    unearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape

    unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory containment checks. Attackers can supply m…

    frostming unearth unearth unearth Debian Ubuntu