Threats tagged 'brew-adr-viewer-cve-2026-59924'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.9	EPSS 0.5%	CVE-2026-59924Mistune: Prior to 3.3.0, Include.parse() joins and normalizes user-supplied include paths without verifying that the Medium5.9EPSS 0.5%2026-07-08GCVE DatabaseCVE-2026-59924 CVE-2026-59924 is a medium severity path traversal vulnerability in the mistune library's Include directive used by the recon-ng tool, specifically in adr-viewer when processing markdown files. It allows crafted include paths to read arbitrary files outside the intended markdown directory due to improper validation of resolved file paths. A fix is available that validates the resolved path before file access to prevent this issue. EPSS 0.5%Report on CVE-2026-59924 Vulnerability #brew-adr-viewer-cve-2026-59924 #homebrew #brew-recon-ng-cve-2026-59924	GCVE Database	2026-07-08

Page 1 of 1