CVE record · 1 source
CVE-2026-111448
CVSS 3.7Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems.
- Vendor
- Canonical
- Product
- canonical
- CVSS
- 3.7
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems.
Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags…