/

CVE-2026-38595

Severity:

CRITICAL RISK

(9.8)

CVE-2026-38595

Received

Vulnerability type

Category:

CWE:

CWE-22, CWE-78

Impact:

Severity:

CRITICAL RISK

(9.8)

CVSS version:

3.1

Catch this CVE while code is being written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Sources

SourceLink
github.comgithub.com/Den-Sec/security-research/blob/master/advisories/gohttpserver/VDR-001-zipslip.md
github.comgithub.com/Den-Sec/security-research/blob/master/advisories/im3x-scriptables/VDR-003-os-command-injection.md
github.comgithub.com/im3x/Scriptables
github.comgithub.com/im3x/Scriptables/blob/v2-dev/app.js
Find out what's already
exploitable in your codebase.