VYPR

Duplicacy

by Google

CVEs (1)

  • CVE-2026-82264MedAug 28, 2026
    risk 0.37cvss 6.8epss 0.01

    Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft malicious snapshot entries with directory traversal sequences to write files outside the restore…