CVE-2026-53502 in Thumbor
الملخص
بحسب MITRE • 31/07/2026
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILE_LOADER_ROOT_PATH through watermark or frame filter input. This issue is fixed in 7.8.0.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.