Количество 4
Количество 4
CVE-2026-53502
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILE_LOADER_ROOT_PATH through watermark or frame filter input. This issue is fixed in 7.8.0.
CVE-2026-53502
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILE_LOADER_ROOT_PATH through watermark or frame filter input. This issue is fixed in 7.8.0.
CVE-2026-53502
Thumbor is an open-source photo thumbnail service by globo.com. Prior ...
GHSA-cj54-hpcc-gj6h
Thumbor has path traversal via post-validation URL decoding bypass in file_loader
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-53502 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILE_LOADER_ROOT_PATH through watermark or frame filter input. This issue is fixed in 7.8.0. | 0% Низкий | 8 дней назад | |
 | CVE-2026-53502 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILE_LOADER_ROOT_PATH through watermark or frame filter input. This issue is fixed in 7.8.0. | 0% Низкий | 8 дней назад | |
| CVE-2026-53502 Thumbor is an open-source photo thumbnail service by globo.com. Prior ... | 0% Низкий | 8 дней назад | |
| GHSA-cj54-hpcc-gj6h Thumbor has path traversal via post-validation URL decoding bypass in file_loader | 0% Низкий | 8 дней назад |
Уязвимостей на страницу