Skip to content
OpenAdvisories

Vendor

lektor

2 known vulnerabilities.

Products

lektor 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-123619

    Lektor through 3.3.14 and 3.4.0b15 Path Traversal via Admin API Drive-Letter Paths

    Lektor through 3.3.14 and 3.4.0b15 contains an absolute path traversal vulnerability in the admin API on Windows that allows attackers to escape the project directory by supplying drive-letter paths that cleanup_path does not normalise. Attackers can use a ma…

    lektor lektor