Lucene search
+L

7 matches found

PyPA
PyPA
•added 2026/07/07 4:03 p.m.•27 views

Dosage vulnerable to a Directory Traversal through crafted HTTP responses

ImpactWhen downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type header...

8.8CVSS6.2AI score0.00486EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/07/07 4:03 p.m.•23 views

PYSEC-2026-1316 Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.2AI score0.00486EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/11/07 3:02 a.m.•34 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS0.00486EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/07 3:02 a.m.•5 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References2
OSV
OSV
•added 2025/11/07 3:02 a.m.•18 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/11/04 3:31 p.m.•28 views

Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.2AI score0.00486EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/11/04 3:31 p.m.•22 views

GHSA-4VCX-3PJ3-44M7 Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.2AI score0.00486EPSS
SaveExploits0References4
Rows per page
Query Builder