CVE-2026-11470
1 advisory.
Maven/org.hswebframework.web:hsweb-system-file CVE-2026-11470: medium 6.3, EPSS 0.30%
hsweb-framework has a Path Traversal issue
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vjmr-f5fc-vr2w
- https://nvd.nist.gov/vuln/detail/CVE-2026-11470
- https://github.com/hs-web/hsweb-framework/issues/344
- https://github.com/hs-web/hsweb-framework/issues/344#issuecomment-3798035002
- https://github.com/hs-web/hsweb-framework/commit/8009845b577d8a2c4bbf4fdd8e8913799a714be6
- https://github.com/hs-web/hsweb-framework
- https://vuldb.com/cve/CVE-2026-11470
- https://vuldb.com/submit/833856
- https://vuldb.com/vuln/369090
- https://vuldb.com/vuln/369090/cti
CVE-2026-11470 · published · modified · JSON