Sebastion
←All topics

path-traversal

2 pieces of writing

security13 min read

CVE-2026-21440 and AI file tools show path traversal is an architectural antipattern

Path traversal bugs in AdonisJS, Gogs, rsync and AI development tools point to the same design failure: modern frameworks still delegate file safety to application code at the worst possible boundary.

Edict's file:// handler let anyone read files outside the project directory (CWE-22)
vulnerability5 min read

Edict's file:// handler let anyone read files outside the project directory (CWE-22)