EUVD-2025-32426

Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack that results in the disclosure of directory listings. The code contains a security check to prevent path traversal for reading file...

EUVD-2022-1297

Malicious code in bioql PyPI...

PT-2022-19491 · Unknown +1 · Jupyter Notebook +3

Name of the Vulnerable Software and Affected Versions: Jupyter Server versions prior to 1.17.1 Jupyter Notebook versions 6.4.0 through 6.4.11 Jupyter Lab versions 6.4.0 through 6.4.11 Description: The issue allows an attacker to leak the access token assigned at start time by guessing or brute...

Shescape 操作系统命令注入漏洞

shescape is an open source package of simple shell escaping programs for JavaScript. Use it to escape user-controlled input to shell commands to prevent shell injection. shescape versions 1.4.0 through 1.5.1 are vulnerable to an information disclosure vulnerability that stems from using the escap...

CVE-2017-15918

Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks...