The knowns-dev/knowns software version 0.11.4 contains a directory traversal vulnerability triggered by specially crafted folder name input to the create_doc tool. This flaw could allow an attacker to manipulate file paths to access or modify files outside the designated directories. No further technical details or exploitation methods are provided in the source data.

Successful exploitation could lead to unauthorized access or modification of files outside the intended directory structure, potentially exposing sensitive information or enabling further attacks. No evidence of active exploitation in the wild is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor for vendor updates and apply patches once available.