CVE-2022-31546

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

EUVD-2022-53002

Malicious code in bioql PyPI...

CVE-2022-31546

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31546

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31546

Affected software: nlpweb/glance repository (GitHub) up to 2014-06-27. Vulnerability: absolute path traversal due to unsafe usage of Flask send_file. Impact: potential exposure of sensitive server files; practical consequences stated as absolute path traversal. Evidence: CVE-2022-31546 entries fr...