Brufdev vulnerabilities
We track 1 vulnerability in Brufdev products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest Brufdev vulnerabilities
- 9.6 Critical severity
many-notes: Improper Limitation of a Pathname to a Restricted Directory
Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts archive filenames containing parent-directory traversal segments. An authenticated u