Lucene search
+L

14 matches found

Mageia
Mageia
•added 2026/11/10 4:31 p.m.•3 views

Updated mopidy package fixes a security vulnerability

Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...

6.9CVSS5.9AI score0.00431EPSS
SaveExploits0References2
Rows per page
Query Builder