https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 08:12:49 +0000 https://db.gcve.eu/vuln/cve-2026-114492 <p><strong>Affected:</strong> flipped-aurora gin-vue-admin</p> <p>gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to /autoCode/removePlugin with &#39;../&#39; sequences, causing os.RemoveAll to delete any directory writable by the server process.</p> <p><strong>Affected:</strong> flipped-aurora gin-vue-admin</p> <p>gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to /autoCode/removePlugin with &#39;../&#39; sequences, causing os.RemoveAll to delete any directory writable by the server process.</p> https://db.gcve.eu/vuln/cve-2026-114492