CVE-2026-46671

Summary

Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

Severity

medium

Also known as

GHSA-4j5m-wc25-pvh7

Published

2026-05-21

References

• https://github.com/msiemens/onenote.rs/security/advisories/GHSA-4j5m-wc25-pvh7
• https://github.com/msiemens/onenote.rs/commit/c9267b2c96e2542be7e7b557d67318e81b733585
• https://github.com/msiemens/onenote.rs

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity