input-leap

Products

ProductCVEsExploitedLatest
Input Leap1–Sep 25, 2026

Exploited and recent CVEs

  • CVE-2026-100230 Medium 5.3 Input Leap (aka input-leap) through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with result 0.7%