Skip to content

Froxlor has Incomplete Symlink Validation in DataDump.add() Allows Arbitrary Directory Ownership Takeover via Cron

High severity GitHub Reviewed Published Apr 15, 2026 in froxlor/froxlor

No open alerts for this advisory

Give feedback on Dependabot alerts