Skip to content
OpenAdvisories

Vendor

squidowl

2 known vulnerabilities.

Products

halloy 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-32733

    Halloy has a file transfer path traveral vulnerability

    Halloy is an IRC application written in Rust. Prior to commit 0f77b2cfc5f822517a256ea5a4b94bad8bfe38b6, the DCC receive flow did not sanitize filenames from incoming `DCC SEND` requests. A remote IRC user could send a filename with path traversal sequences li…

    squidowl halloy