17 matches found
PYSEC-2026-1316 Dosage vulnerable to a Directory Traversal through crafted HTTP responses
Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...
8.8CVSS6.1AI score0.00453EPSS
SaveExploits0References6
20