Path Traversal in scout-browser

2022-05-0400:00:24

Google

osv.dev

0.001 Low

EPSS

Percentile

49.0%

JSON

Scout is a Variant Call Format (VCF) visualization interface. The Pypi package scout-browser is vulnerable to path traversal due to send_file call in versions prior to 4.52.

CPENameOperatorVersion
scout-browsereq3.0.7
scout-browsereq4.24.1
scout-browsereq4.30.1
scout-browsereq4.15.1
scout-browsereq4.46
scout-browsereq4.15
scout-browsereq4.16.1
scout-browsereq4.23
scout-browsereq4.34
scout-browsereq4.21.2

Name	Operator	Version
scout-browser	eq	3.0.7
scout-browser	eq	4.24.1
scout-browser	eq	4.30.1
scout-browser	eq	4.15.1
scout-browser	eq	4.46
scout-browser	eq	4.15
scout-browser	eq	4.16.1
scout-browser	eq	4.23
scout-browser	eq	4.34
scout-browser	eq	4.21.2