marmite vulnerabilities

2 known vulnerabilities in marmite from Rochacbruno. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  marmite: Missing Authentication for Critical Functionality

  CVE-2026-102811Sep 29, 2026Rochacbruno

  Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Att

• 7.5 High severity

  marmite: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-102810Sep 29, 2026Rochacbruno

  Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handle_request function in src/server.rs fails to reject .. segments after percent-dec