Webpro-nl CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW Webpro-nl CVE published 2026-11-02

CVE-2026-120325

A security vulnerability has been detected in Webpro-nl Knip up to 6.44.0. The impacted element is the function writeFile of the file packages/knip/src/IssueFixer.ts of the component Workspace Handler. Such manipulation of the argument workspaces leads to path traversal. The attack can be executed remotely. This vulnerability affects the Workspace Handler component of Webpro-nl Knip, specifically through [truncated]