Lucene search
+L

6 matches found

OSV
OSV
added 2026/08/07 7:58 p.m.18 views

CVE-2026-47661 Pathling has path traversal in $result endpoint that allows arbitrary warehouse file read

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's /$result endpoint allows a caller who can obtain any valid async export job ID to supply file parameter values containing path...

8.7CVSS5.5AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/07 7:58 p.m.29 views

CVE-2026-47661 Pathling has path traversal in $result endpoint that allows arbitrary warehouse file read

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's /$result endpoint allows a caller who can obtain any valid async export job ID to supply file parameter values containing path...

8.7CVSS0.00403EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/07 7:58 p.m.47 views

CVE-2026-47661

Pathling Server prior to 2.0.0 is vulnerable in the /$result endpoint: an attacker with a valid async export job ID can supply file parameters with path traversal sequences. The handler only validates the supplied job and does not normalise or confine the requested file path to the job’s director...

8.7CVSS5.4AI score0.00403EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/07 12:0 a.m.3 views

PT-2026-69132

Name of the Vulnerable Software and Affected Versions Pathling Server versions prior to 2.0.0 Description The /$result endpoint allows a caller with a valid async export job ID to provide file parameter values containing path traversal sequences. Path traversal is a technique used to access files...

8.7CVSS5.3AI score0.00403EPSS
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/13 3:23 a.m.8 views

Malicious code in array-async-export-lambda-transpile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c2bf7c9af1def9500860d07c8a0a69f31f3575833535c28b6b1d0715a5dd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2017/05/25 1:39 p.m.9 views

kernel: Oops in shash_async_export()

A vulnerability was found in the Linux kernel. An unprivileged local user could trigger oops in shashasyncexport by attempting to force the in-kernel hashing algorithms into decrypting an empty data set...

5.5CVSS6.8AI score0.00426EPSS
SaveExploits0References4
Rows per page
Query Builder