Skip to content

GHSA lookup

GHSA-X52C-5HRQ-76PQ

Pruva has a verified reproduction for GHSA-X52C-5HRQ-76PQ: Horilla HRMS protected_media path traversal enables outside-root file read. The canonical evidence record is REPRO-2026-00295.

REPRO

REPRO-2026-00295

Package

horilla/horilla-hr · github

Severity

HIGH

Status

published