EUVD-2025-21170

Malicious code in bioql PyPI...

CVE-2025-7450

A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has been classified as critical. This affects the function ResetUserAvatar of the file controller/api/v1/user.go of the component API. The manipulation of the argument filename leads to path traversal. It is possible to initiate the...

CVE-2025-7450

A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has been classified as critical. This affects the function ResetUserAvatar of the file controller/api/v1/user.go of the component API. The manipulation of the argument filename leads to path traversal. It is possible to initiate the...

CVE-2025-7450

A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has been classified as critical. This affects the function ResetUserAvatar of the file controller/api/v1/user.go of the component API. The manipulation of the argument filename leads to path traversal. It is possible to initiate the...

CVE-2025-7450 letseeqiji gorobbs API user.go ResetUserAvatar path traversal

A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has been classified as critical. This affects the function ResetUserAvatar of the file controller/api/v1/user.go of the component API. The manipulation of the argument filename leads to path traversal. It is possible to initiate the...

CVE-2025-7450 letseeqiji gorobbs API user.go ResetUserAvatar path traversal

A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has been classified as critical. This affects the function ResetUserAvatar of the file controller/api/v1/user.go of the component API. The manipulation of the argument filename leads to path traversal. It is possible to initiate the...

CVE-2025-7450 letseeqiji gorobbs API user.go ResetUserAvatar path traversal

A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has been classified as critical. This affects the function ResetUserAvatar of the file controller/api/v1/user.go of the component API. The manipulation of the argument filename leads to path traversal. It is possible to initiate the...

CVE-2025-7450

CVE-2025-7450 affects letseeqiji gorobbs prior to 1.0.9; vulnerable component is the function ResetUserAvatar in file controller/api/v1/user.go where manipulating the filename argument enables a path traversal vulnerability. The issue allows remote exploitation and, per multiple sources, exploita...

CVE-2025-7450: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has been classified as critical. This affects the function ResetUserAvatar of the file controller/api/v1/user.go of the component API. The manipulation of the argument filename leads to path traversal. It is possible to initiate the...

PT-2025-29267 · Letseeqiji · Gorobbs

Name of the Vulnerable Software and Affected Versions: letseeqiji gorobbs versions up to 1.0.8 Description: A critical issue exists in letseeqiji gorobbs. The ResetUserAvatar function within the controller/api/v1/user.go file is susceptible to path traversal due to manipulation of the filename...

Gorobbs path traversal vulnerability

gorobbs is a full-text search engine by letseeqiji's individual developers. A path traversal vulnerability exists in gorobbs 1.0.8 and earlier versions, which stems from a path traversal caused by the parameter filename operation...