Lucene search
+L

17 matches found

OSV
OSV
added 2026/07/07 4:03 p.m.13 views

PYSEC-2026-1316 Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.1AI score0.00453EPSS
SaveExploits0References6
Rows per page
Query Builder