CVE-2026-53779 | webp-sh webp_server_go up to 0.14.x on Windows Path Normalization handler/router.go path.Clean path traversal

June 22, 2026 Yanac

A vulnerability was found in webp-sh webp_server_go up to 0.14.x on Windows. It has been rated as critical. Affected by this vulnerability is the function path.Clean of the file handler/router.go of the component Path Normalization Handler. This manipulation causes path traversal.

This vulnerability is tracked as CVE-2026-53779. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More