WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows_CVE-2026-53779
WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMG_PATH directory by sending requests with percent-encoded backslashes (%5C) that bypass the path.Clean() sanitization i...