Threats tagged 'ghsa-9v55-g5pj-xwf7'

CVE-2026-124508 is a medium severity vulnerability in floci-io Floci up to version 2.4.0. It affects the BuildspecParser.parseArtifacts function in the Artifact Handler component, allowing remote attackers to perform path traversal via manipulation of the buildspecOverride.artifacts.base-directory argument. The vulnerability has been publicly disclosed with exploit details available, but the vendor has not responded or provided a fix.