Beveiligingsadvies

CVE-2026-32885

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-22 16:54:47

Laatst bijgewerkt 2026-04-22 18:35:36

Toegewezen door GitHub_M

CVSS-score 6.5

Status PUBLISHED

Beschrijving

DDEV is an open-source tool for running local web development environments for PHP and Node.js. Versions prior to 1.25.2 have unsanitized extraction in both `Untar()` and `Unzip()` functions in `pkg/archive/archive.go`. Downloads and extracts archives from remote sources without path validation. Version 1.25.2 patches the issue.

← Alle CVE's bekijken Bekijk op cve.org ↗