1 matches found
datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory
Summary When processing an attacker-controlled Protobuf schema, vulnerable versions of datamodel-code-generator could write a generated weak-import stub outside the intended weakimports temporary directory. Absolute import paths and relative paths containing .. could escape this directory. An...
7.5CVSS6.3AI score0.00535EPSS
SaveExploits0References4Affected Software1
20