Cube-root Directory-serve
2 CVEs affecting Cube-root Directory-serve. Latest disclosed: 2026-08-10. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72569 | Critical | 9.1 | 2026-08-10 | A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the inten… |
CVE-2026-72570 | Medium | 5.4 | 2026-08-10 | A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web int… |