CVE-2026-50635: Path Traversal Extension Name

Constructing path names using values retrieved from getters like 'getName' without validation can lead to path traversal vulnerabilities. Ensure the directory boundary is validated before appending it to a file or directory path.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0PHP
greprules fetch cve-2026-50635-path-traversal-extension-name --engine opengrep

Description

Constructing path names using values retrieved from getters like 'getName' without validation can lead to path traversal vulnerabilities. Ensure the directory boundary is validated before appending it to a file or directory path.