CVE-2022-31546

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

EUVD-2022-53002

Malicious code in bioql PyPI...

CVE-2022-31546

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31546

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31546

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31546

Affected software: nlpweb/glance repository (GitHub) up to 2014-06-27. Vulnerability: absolute path traversal due to unsafe usage of Flask send_file. Impact: potential exposure of sensitive server files; practical consequences stated as absolute path traversal. Evidence: CVE-2022-31546 entries fr...

PT-2022-20818

Name of the Vulnerable Software and Affected Versions nlpweb/glance versions prior to 2014-06-27 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2014-06-27, consider updating to a version that safely...

CVE-2022-31546: Improper Limitation of a Pathname to a Restricted Directory

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...