# Cohttp 6.3.0 fixes path-traversal issue after rapid probes

_Friday, August 28, 2026 at 11:58 AM EDT · Security · Latest · Tier 2 — Notable_

![Cohttp 6.3.0 fixes path-traversal issue after rapid probes — Primary](https://anil.recoil.org/images/vulncheck-2026.640.webp)

OCaml's cohttp 6.3.0 was released with a fix for a path-traversal issue, according to maintainer Anil Madhavapeddy. He wrote that his web-server logs showed probes using the bug pattern minutes after a public pull request was opened. In a local test, he said an agent generated an exploit after being given a broad issue direction. The account does not establish the scope of any exploitation.

## Sources

- [Hacker News](https://anil.recoil.org/notes/rumour-is-the-exploit)

---
Canonical: https://techandbusiness.org/newswire/s8N1l-Ba9D_gqPn0Vas5YY
Retrieved: 2026-08-28T18:59:17.645Z
Publisher: Tech & Business (techandbusiness.org)