All vulnerabilities

Servers and applications

GHSA-f67h-6jph-8899

Cross-tenant filer write in SeaweedFS S3Tables/Iceberg REST gateways via stored metadataLocation (path traversal)

Severity
High 7.2
Published
9 Nov 2026
Last changed
9 Nov 2026
Added to UpHeron
9 Nov 2026
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
SeaweedFSServers and applications · github:seaweedfs/seaweedfs
  • Every version up to 4.46

References