Bughunt 7
- GHSA-x2x8-gq67-9mq6「With the default SymlinkExtractAction::ExtractRecursiveInFolder (since v9.0.0), symlinks pointing outside the extraction directory are still created」
- GHSA-5qh5-c9fp-66jm 「(Windows only) attacker-controlled symlink target triggers outbound SMB/NTLM authentication via std::fs::metadata() during extraction」
- CVE-2026-115908 「Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0)」
- GHSA-7fh4-27xm-vxgg「Stored XSS via image/svg+xml served inline by StaticDir / NamedFile」
- GHSA-826f-v74x-v324「Integer Underflow in Multipart Range Parsing Allows Remote DoS via Memory Exhaustion」
- GHSA-c47g-2m49-r7hv「Stored XSS via unescaped filename in ?simple output」
- GHSA-6g56-m84x-v64g「Symlink Path Traversal Allows Arbitrary File Write Outside Serve Root」