EUVD-2025-24027

Malicious code in bioql PyPI...

GHSA-RRGF-HCR9-JQ6H TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)

Description A critical path traversal vulnerability CWE-22 has been identified in the reviewpaper function in backend/app.py. The vulnerability allows malicious users to access arbitrary PDF files on the server by providing crafted file paths that bypass the intended security restrictions. Impact...

CVE-2025-55149

Tiny-Scientist is a lightweight framework for automating the entire lifecycle of scientific research—from ideation to implementation, writing, and review. In versions 0.1.1 and below, a critical path traversal vulnerability has been identified in the reviewpaper function in backend/app.py. The...

CVE-2025-55149

Tiny-Scientist is a lightweight framework for automating the entire lifecycle of scientific research—from ideation to implementation, writing, and review. In versions 0.1.1 and below, a critical path traversal vulnerability has been identified in the reviewpaper function in backend/app.py. The...

Directory Traversal

Overview tiny-scientist is an A lightweight framework for building research agents Affected versions of this package are vulnerable to Directory Traversal via the reviewpaper function in the backend/app.py file. An attacker can access arbitrary PDF files on the server by supplying crafted file...

CVE-2025-55149

CVE-2025-55149 affects Tiny-Scientist (versions

PT-2025-32426 · Unknown · Tiny-Scientist

Name of the Vulnerable Software and Affected Versions: Tiny-Scientist versions 0.1.1 and below Description: Tiny-Scientist is a lightweight framework for automating the entire lifecycle of scientific research. A path traversal vulnerability has been identified in the review paper function in...

TinyScientist 路径遍历漏洞

TinyScientist is an open source U Lab @UIUC lightweight framework for developers to build research agents. A path traversal vulnerability exists in TinyScientist 0.1.1 and earlier versions, which stems from a path traversal vulnerability in the reviewpaper function that could lead to accessing...