CVE-2026-55629Published
Whistle is an HTTP, HTTP2, HTTPS, and WebSocket debugging proxy. Prior to 2.10.3, lib/service/service.js handles GET /cgi-bin/temp/get by reading req.query.filename, joining it to TEMP_FILES_PATH only when it matches the temporary file patt…
Exact source revision recorded 25 Oct 2026 14:19:05 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-55629
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.