Threats affecting pkg:github/cefsharp/CefSharp

CVE-2026-48796 is a path traversal vulnerability in CefSharp prior to version 148.0.90. The issue arises from improper validation of request paths in FolderSchemeHandlerFactory.cs, allowing crafted URLs to escape the intended root directory and access local files outside the configured folder. This affects both Windows and Unix-style paths. The vulnerability is fixed in version 148.0.90 by properly enforcing directory boundaries and rejecting malicious path syntax.