bleenco CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM bleenco CVE published 2026-10-11

CVE-2026-108772

A path traversal vulnerability exists in bleenco abstruse up to 2.1.0, affecting the Cache Endpoint in download_cache.go. This issue allows remote attackers to manipulate file paths using the File argument, potentially leading to unauthorized file access or modification. The vulnerability has a medium severity and defenders should assess exposure and consider applying patches or mitigations. The CVE recor [truncated]