Miembros de
Boletines de Vulnerabilidades |
CVE-2026-100230 |
|
| Software afectado | MACOS |
| Input Leap (aka input-leap) through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with resultant code execution if a file is written to a startup directory. This occurs via a DDRG message. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-100230 | |
