Cloudanix VulnDB

CVE-2026-71215

High · 7.5

CVSS

7.5

EPSS

—

Published

Aug 5, 2026

CISA due date

—

The record

art-template's sub-template resolution logic (src/compile/adapter/resolve-filename.js), used by both the include and extend template directives, resolves the target file path via path.resolve(root, filename) with no check afterward that the result remains inside root.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities