CVE-2026-7680

A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. Executing a manipulation of the argument folder can lead to path traversal. The attack can be launched remotely. The...

EUVD-2026-26816

A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. Executing a manipulation of the argument folder can lead to path traversal. The attack can be launched remotely. The...

PT-2026-36682

Name of the Vulnerable Software and Affected Versions jsbroks COCO Annotator versions prior to 0.11.2 Description A path traversal issue exists in the Data Endpoint component within the file backend/webserver/api/datasets.py. A remote attacker can manipulate the folder argument to access files an...