Lucene search
K

5 matches found

Veracode
Veracode
added 2025/06/23 7:25 a.m.4 views

Path Traversal

pythona2a is vulnerable to Path traversal. The vulnerability is due to improper validation or sanitization of user-supplied file paths in the createworkflow function, allows an attacker to access arbitrary files on the server by crafting malicious input that traverses directories...

9.8CVSS7.1AI score0.0071EPSS
Exploits1References9Affected Software1
OSV
OSV
added 2025/06/17 9:31 a.m.6 views

GHSA-RP38-PJ7H-R8Q2 python-a2a has a path traversal in the create_workflow function

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommend...

5.5CVSS7.1AI score0.0071EPSS
Exploits1References9
Github Security Blog
Github Security Blog
added 2025/06/17 9:31 a.m.7 views

python-a2a has a path traversal in the create_workflow function

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommend...

9.8CVSS5.5AI score0.0071EPSS
Exploits1References9Affected Software1
NVD
NVD
added 2025/06/17 7:15 a.m.13 views

CVE-2025-6167

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommend...

9.8CVSS0.0071EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/06/17 6:31 a.m.3 views

CVE-2025-6167 themanojdesai python-a2a api.py create_workflow path traversal

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommend...

5.5CVSS5.5AI score0.0071EPSS
Exploits1References6
Rows per page
Query Builder