eventcatalog vulnerabilities

Products

• sdk 1

Latest eventcatalog CVEs

Newest publication first

1. CVE-2026-116046 eventcatalog sdk Custom Documentation Helpers custom-docs.ts rmCustomDoc path traversal

   Published 2026-10-25

   Medium·CVSS 4.8 EPSS 0.14%

   A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the function getCustomDoc/writeCustomDoc/rmCustomDoc of the file packages/sdk/src/custom-docs.ts of the component Custom Documentation Helpers. This manipulation of the argument options.path causes...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.