zrok vulnerabilities
CVEs whose affected-version data names the zrok package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-45576High· 7.5zrok is software for sharing web services, files, and network resources
zrok is software for sharing web services, files, and network resources. From 0.4.23 until 2.0.3, `zrok2 copy` stores attacker-controlled WebDAV or zrok drive paths such as /../outside.txt in the source inventory and passes them to Files…
▾ Twilightnetfoundry · zrokEPSS 0.50%via NVD
CVE-2026-45568Critical· 9.1zrok is software for sharing web services, files, and network resources
zrok is software for sharing web services, files, and network resources. Prior to 2.0.3, zrok's Python SDK ProxyShare Flask proxy route accepts an absolute URL in the request path and passes it to urllib.parse.urljoin, allowing the reque…
▾ Midnightnetfoundry · zrokEPSS 0.54%via NVD