TI-2026-62551 CVE-2026-92812 · GHSA-fjm6-6gxh-mvf2
Decap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matching
Priority HIGH 75
Decap CMS before 3.11.0 contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation.