The vulnerabilities of the functions BaseHttpRequestHandler._post() and aseHttpRequestHandler.get_temp_root() in the httprequesthandler.py component, a library for loading dash-uploader files, allow a hacker to execute arbitrary code.

The vulnerability of the functions BaseHttpRequestHandler.post and aseHttpRequestHandler.gettemproot in the httprequesthandler.py component, a library for uploading dash-uploader files, is related to an incorrect pathname limitation. Exploiting this vulnerability could allow a remote attacker to...