CVE-2026-73030 | frostming unearth up to 0.18.2 is_within_directory path traversal

A vulnerability described as critical has been identified in frostming unearth up to 0.18.2. This vulnerability affects the function is_within_directory. Such manipulation leads to path traversal.

This vulnerability is documented as CVE-2026-73030. The attack can be executed remotely. There is not any exploit available.

Applying a patch is advised to resolve this issue.