Ghostwire

CVE-2026-56860: Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer...

MEDIUM CVSS 0.0

Published: August 13, 2026 | Last Modified: August 13, 2026

Description

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References