EUVD-2025-18266

Malicious code in bioql PyPI...

EUVD-2025-8851

Malicious code in bioql PyPI...

Directory Traversal

org.noear:solon-faas-luffy is vulnerable to Directory Traversal. The vulnerability is due to improper input validation in the solon-faas-luffy component, which allows a remote attacker to conduct XSS attacks...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

GHSA-M63Q-4HR8-5R5H Solon Vulnerable to Directory Traversal

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

Solon Vulnerable to Directory Traversal

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

OpenSolon security vulnerabilities

OpenSolon is a full-scenario Java enterprise application development framework open-sourced by OpenSolon. A security vulnerability exists in OpenSolon version 3.1.2, which stems from the presence of directory traversal in the solon-faas-luffy component, which could lead to a cross-site scripting...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

The solon framework, specifically version 3.1.2 , is vulnerable to a Directory Traversal vulnerability within the solon-faas-luffy component. This flaw is caused by improper input validation , which allows a remote attacker to access files outside the intended directory or craft requests that res...

PT-2025-25410 · Unknown +1 · Solon-Faas-Luffy +1

Name of the Vulnerable Software and Affected Versions: solon version 3.1.2 Description: A Directory Traversal issue allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component. Recommendations: For solon version 3.1.2, consider restricting access to the solon-faas-luffy...

CVE-2023-35839

A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload...

GHSA-2M4Q-2C6R-HMC3 Solon Vulnerable to Path Traversal

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function rendermav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads ...

org.noear:solon-view-beetl (2.9.5-m1), org.noear:solon-view-enjoy (2.9.5-m1) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.5-m1)

org.noear:solon-view MAVEN version 2.9.5-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.5-m1 - org.noear:solon-view-enjoy 2.9.5-m1 - org.noear:solon-view-freemarker 2.9.5-m1...

org.noear:solon-view-beetl (2.9.2-m2), org.noear:solon-view-enjoy (2.9.2-m2) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.2-m2)

org.noear:solon-view MAVEN version 2.9.2-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.2-m2 - org.noear:solon-view-enjoy 2.9.2-m2 - org.noear:solon-view-freemarker 2.9.2-m2...

org.noear:solon-view-beetl (2.9.5-m2), org.noear:solon-view-enjoy (2.9.5-m2) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.5-m2)

org.noear:solon-view MAVEN version 2.9.5-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.5-m2 - org.noear:solon-view-enjoy 2.9.5-m2 - org.noear:solon-view-freemarker 2.9.5-m2...