CVE-2018-6470: Nibbleblog

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Nibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store information to leak.

Affected products

Published 2018-02-01. Last modified 2026-06-17.