Cube-root vulnerabilities
We track 1 vulnerability in Cube-root products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Cube-root vulnerabilities
- 9.1 Critical severity
directory-serve: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option.