Camel Docling output path header allows arbitrary writes (CVE-2026-95629)
A low-privileged caller can steer conversion output to an arbitrary directory through an unvalidated header.
Stories per day · 30 days
2 RSS
1 stories, newest first · one card per story