CVE-2026-54650Published
openhole-server vulnerable to path traversal via URL-decoded request path
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-54650 · Microsoft / collected KEV context
cve-program · CVE-2026-54650
- https://github.com/bablilayoub/openhole/security/advisories/GHSA-fh2f-xfxc-q9cc
- https://github.com/bablilayoub/openhole/commit/a28c27adde2a7ed0c347b730c8707208c0f78ed3
- https://github.com/bablilayoub/openhole/releases/tag/v0.1.2
nvd · CVE-2026-54650
- https://github.com/bablilayoub/openhole/commit/a28c27adde2a7ed0c347b730c8707208c0f78ed3
- https://github.com/bablilayoub/openhole/releases/tag/v0.1.2
- https://github.com/bablilayoub/openhole/security/advisories/GHSA-fh2f-xfxc-q9cc
osv · GHSA-fh2f-xfxc-q9cc
- https://github.com/bablilayoub/openhole/security/advisories/GHSA-fh2f-xfxc-q9cc
- https://github.com/bablilayoub/openhole/commit/a28c27adde2a7ed0c347b730c8707208c0f78ed3
- https://github.com/bablilayoub/openhole
- https://github.com/bablilayoub/openhole/releases/tag/v0.1.2
osv · GO-2026-6135
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.