CVE-2026-13149 vulnerabilities

Vulnerabilities for packages: lerna, rancher-api-ui, thingsboard, jupyter-base-notebook, sqlpad, argo-workflows, pulumi, nextcloud-server, ts-patch, opensearch-dashboards, renovate, kubeflow-katib, langfuse, serve, saf, prism...

GHSA-3JXR-9VMJ-R5CP vulnerabilities

Vulnerabilities for packages: lerna, rancher-api-ui, thingsboard, jupyter-base-notebook, sqlpad, argo-workflows, pulumi, nextcloud-server, ts-patch, opensearch-dashboards, renovate, kubeflow-katib, langfuse, serve, saf, prism...

GHSA-PH9P-34F9-6G65 vulnerabilities

Vulnerabilities for packages: lerna, vitess, jupyter-base-notebook, pulumi, opensearch-dashboards, renovate, kubeflow-katib, py3-jupyterlab, saf, prism...

CVE-2026-44705 vulnerabilities

Vulnerabilities for packages: lerna, vitess, jupyter-base-notebook, pulumi, opensearch-dashboards, renovate, kubeflow-katib, py3-jupyterlab, saf, prism...

GHSA-QJX8-664M-686J vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, saf...

CVE-2026-46625 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, saf...

CVE-2026-44705 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, pulumi, kubeflow-katib, wazuh-dashboard-fips, kibana, authentik-fips, tensorflow-cpu-jupyter, prism, vitess, arangodb, wazuh-dashboard, jupyter-base-notebook, saf, gitlab-rails-ce, renovate, authentik, langfuse, gitlab-rails-ce-fips, homepage,...

CVE-2025-54371 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, saf...

GHSA-9965-VMPH-33XX vulnerabilities

Vulnerabilities for packages: sqlpad, saf...

CVE-2025-56200 vulnerabilities

Vulnerabilities for packages: sqlpad, saf...

GHSA-9965-VMPH-33XX vulnerabilities

Vulnerabilities for packages: sqlpad, saf, redisinsight...

CVE-2025-56200 vulnerabilities

Vulnerabilities for packages: sqlpad, saf, redisinsight...

DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import

Impact ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be created anywhere the Tomcat/DSpace user can write to on the server. However, this path traversal vulnerability is only possible...

Path Traversal

org.dspace:dspace-api is vulnerable to path traversal. A privileged attacker is able to create a file or a directory anywhere on the server within the user scope via a specifically crafted SAF package...

Path traversal

DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be...

CVE-2022-31195

DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be...