path-traversal

This article reports on a critical security vulnerability in WordPress that allows unauthenticated path traversal leading to conditional remote code execution, with setup instructions from the development repository.

Collider 1.3.0 adds path traversal protection for repository indices and strips bearer tokens on cross-origin redirects to prevent security vulnerabilities.

CVE-2026-52884 describes a zero-click remote code execution vulnerability in Notepad++ via path traversal, affecting users on Windows.