Skip to content

CVE record · 1 source

CVE-2026-62679

Lychee is a free, open-source photo-management tool.

Vendor: Canonical
Product: canonical
Exposure class: Collaboration

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

5

CVE NVD 16d ago

Lychee is a free, open-source photo-management tool.

Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check…

CVE-2026-62679 Canonical