GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
2917
Downloads
3.3M
Verified
2917
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-44226: Archive Symlink Extraction Bypasscve-2026-44226-archive-symlink-extraction-bypass

Extracting archives without checking for symbolic links can lead to arbitrary file write (symlink escape). An attacker can craft an archive with a symbolic link pointing outside the extraction directory, followed by a file that writes through the symlink. Ensure all entries are validated for symlinks before extraction.

PythonCVE-2026-44226CWE-59
by Provallyupdated 2026-06-23Apache-2.0
7510 direct751 via packs
77
All matching rules loaded.