rustypaste vulnerabilities

CVEs whose affected-version data names the rustypaste package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-90774High· 7.5PoC

1w ago

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header …

▾ Midnightorhun · rustypasteEPSS 0.38%via NVD