CVE-2022-31521

The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

EUVD-2022-52977

Malicious code in bioql PyPI...

CVE-2022-31521

The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31521

The CVE-2022-31521 entry concerns the Niyaz-Mohamed/mosaic repository up to version 1.0.0, where an absolute path traversal is possible due to unsafe usage of Flask’s send_file. The Red Hat/CVE, NVD, OSV and other sources confirm this underlying flaw stems from how file paths are handled in send_...

PT-2022-20792

Name of the Vulnerable Software and Affected Versions Niyaz-Mohamed/mosaic version 1.0.0 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.0.0 and earlier, consider restricting access to the send...

CVE-2022-31521: Improper Limitation of a Pathname to a Restricted Directory

The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...