Lucene search
+L

7 matches found

osv_pysec
osv_pysec
•added 2026/07/07 4:03 p.m.•39 views

PYSEC-2026-1316 Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References6
PyPA
PyPA
•added 2026/07/07 4:03 p.m.•30 views

Dosage vulnerable to a Directory Traversal through crafted HTTP responses

ImpactWhen downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type header...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2025/11/07 3:02 a.m.•37 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS0.00486EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/07 3:02 a.m.•6 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6AI score0.00486EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/11/07 3:02 a.m.•24 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6.9AI score
SaveExploits0References4
osv_ghsa
osv_ghsa
•added 2025/11/04 3:31 p.m.•37 views

GHSA-4VCX-3PJ3-44M7 Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/11/04 3:31 p.m.•33 views

Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder