EUVD-2026-32564

RVF formerly Remix Validated Form provides easy form validation and state management for React. From 6.0.0 to before 6.0.4 and 7.0.2, setPath in @rvf/set-get used by @rvf/core to flatten incoming form data into a nested object does not block the keys proto, constructor, or prototype when walking ...

RVF 安全漏洞

RVF is a React form validation and state management tool developed by Aaron Pettengill. Versions of RVF prior to 6.0.0, 6.0.4, and 7.0.2 contained security vulnerabilities. These vulnerabilities stemmed from the setPath function in @rvf/set-get, which did not prevent the proto, constructor, or...

EUVD-2025-25699

Malicious code in bioql PyPI...

Absolute Path Traversal

Overview Affected versions of this package are vulnerable to Absolute Path Traversal via the setPath method. An attacker can access or leak sensitive information by constructing a malicious XLSX file that manipulates the path to external or internal resources, exploiting the file reading mechanis...

Absolute Path Traversal

Overview phpoffice/phpspreadsheet is a Spreadsheet engine that Read, Create and Write Spreadsheet documents in PHP . Affected versions of this package are vulnerable to Absolute Path Traversal via the setPath method. An attacker can access or leak sensitive information by constructing a malicious...

CVE-2024-35474

A Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a remote attacker to disclose files on the server, via setPath in ResourcePackFileServer.kt...

ResourcePack Server Security Vulnerability

ResourcePack Server is a small server hosting server resource pack by Brian Duan, an individual developer in China. A security vulnerability exists in iceice666 ResourcePack Server versions prior to v1.0.8, which stems from a vulnerability that allows remote attackers to disclose files on the...

PT-2020-6993 · Python · Python

Name of the Vulnerable Software and Affected Versions: Python versions 3.6 through 3.6.10 Python versions 3.7 through 3.7.8 Python versions 3.8 through 3.8.4rc1 Python versions 3.9 through 3.9.0b4 Description: The issue is related to the use of an invalid search path for loading python3.dll after...