TI-2026-71732 CVE-2026-109965 · GHSA-f7x4-jgqg-5mc6
Symlink following in Serena file tools exposes files outside project root
Priority HIGH 72
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository.