Skip to content
Threat Feed
Subscribe

Product

WhoDB (< 0.135.0)

1 brief RSS
high advisory

WhoDB Path Traversal Vulnerability (CVE-2026-112005)

WhoDB versions prior to 0.135.0 are vulnerable to path traversal via DuckDB filesystem functions in the query editor, enabling remote unauthenticated file read and write access.

WhoDB path-traversal web-vulnerability cve-2026-112005
2t 1c