CVE-2026-111448Published
Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept …
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111448 · Microsoft / collected KEV context
cve-program · CVE-2026-111448
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.