{"id":"CVE-2026-70383","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-70383","summary":null,"details":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estonian Information System Authority (RIA) DigiDoc4 client.\n\nThis issue affects DigiDoc4: from 4.0.0 before 4.11.0.","published":"2026-08-20T14:17:58.050Z","modified":"2026-08-22T03:58:13.989015913Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":{"url":"https://github.com/open-eid/DigiDoc4-Client/pull/1402","label":"open-eid/DigiDoc4-Client#1402"},"references":[{"type":"FIX","url":"https://github.com/open-eid/DigiDoc4-Client/pull/1402"},{"type":"FIX","url":"https://github.com/open-eid/libdigidocpp/pull/736"},{"type":"PACKAGE","url":"https://github.com/open-eid/DigiDoc4-Client"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-22T03:58:13.989015913Z"}}