setuptools: Path Traversal Vulnerability in setuptools PackageIndex

A path traversal vulnerability in the Python setuptools library allows attackers with limited system access to write files outside the intended temporary directory by manipulating package download URLs. This flaw bypasses basic filename sanitization and can lead to unauthorized overwrites of...

Google Chrome Information Disclosure Vulnerability (CNVD-2019-22839)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 72.0.3626.81. A local attacker can exploit the vulnerability to read URLs used for downloads with the help of the file system...