Pulpy vulnerabilities

1 known vulnerability in Pulpy from Enesgkky. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Pulpy: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-44225May 12, 2026EnesgkkyEPSS 1.54%

  Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to 0.1.1, Pulpy injects a pulpy.fs JavaScript API into every packaged web application, giving it access to the host filesystem. A validateFsPath() function is supposed to s