Skip to content
Threat Feed

Product

DumbAssets

1 brief RSS
critical threat

DumbAssets Path Traversal Vulnerability (CVE-2026-45230)

DumbAssets version 1.0.11 is vulnerable to a path traversal vulnerability in the POST /api/delete-file endpoint, allowing unauthenticated attackers to delete arbitrary files, including critical files like server.js or package.json, resulting in denial of service.

DumbAssets path traversal denial of service cve-2026-45230
2r 1t 1c