uniget: Path Traversal in Hook Files - Directory Escape Vulnerability

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-55062 · Microsoft / collected KEV context

EUVD-2026-82370

GHSA-m6jg-wr9m-cg2f

GO-2026-6247

cve-program · CVE-2026-55062

• https://github.com/uniget-org/cli/security/advisories/GHSA-m6jg-wr9m-cg2f
• https://github.com/uniget-org/cli/commit/7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91
• https://github.com/uniget-org/cli/releases/tag/v0.27.6

euvd · EUVD-2026-82370

• https://github.com/uniget-org/cli/security/advisories/GHSA-m6jg-wr9m-cg2f
• https://github.com/uniget-org/cli/commit/7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91
• https://github.com/uniget-org/cli/releases/tag/v0.27.6

nvd · CVE-2026-55062

• https://github.com/uniget-org/cli/commit/7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91
• https://github.com/uniget-org/cli/releases/tag/v0.27.6
• https://github.com/uniget-org/cli/security/advisories/GHSA-m6jg-wr9m-cg2f

osv · GHSA-m6jg-wr9m-cg2f

• https://github.com/uniget-org/cli/security/advisories/GHSA-m6jg-wr9m-cg2f
• https://github.com/uniget-org/cli/commit/7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91
• https://github.com/uniget-org/cli
• https://github.com/uniget-org/cli/releases/tag/v0.27.6

osv · GO-2026-6247

• https://github.com/uniget-org/cli/security/advisories/GHSA-m6jg-wr9m-cg2f
• https://github.com/uniget-org/cli/commit/7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91
• https://github.com/uniget-org/cli/releases/tag/v0.27.6

No related operational record is retained in the current change model.