CVE-2022-31507

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31507: Improper Limitation of a Pathname to a Restricted Directory

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20776

Name of the Vulnerable Software and Affected Versions ganga-devs/ganga versions prior to 8.5.10 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 8.5.10, update to version 8.5.10 or later to resolv...