Path Traversal in Adonisjs Core
CVE-2026-21440
AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may allow a remote attacker to write arbitrary files to arbitrary locations on the server filesystem. This impacts @adonisjs/b…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.011 (60.8th percentile) — read the EPSS interpretation.
Affected products
- Adonisjs Core — versions < 10.1.2, >= 11.0.0-next.0, < 11.0.0-next.6
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)