EUVD-2025-18266

Malicious code in bioql PyPI...

EUVD-2025-8851

Malicious code in bioql PyPI...

Directory Traversal

org.noear:solon-faas-luffy is vulnerable to Directory Traversal. The vulnerability is due to improper input validation in the solon-faas-luffy component, which allows a remote attacker to conduct XSS attacks...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

GHSA-M63Q-4HR8-5R5H Solon Vulnerable to Directory Traversal

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

Solon Vulnerable to Directory Traversal

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

CVE-2025-46096 affects Solon v3.1.2, with a directory traversal vulnerability in the solon-faas-luffy component that enables a remote attacker to trigger XSS. The issue is supported by multiple sources (Red Hat, GHSA, NVD, Snyk) and has remediation guidance to upgrade the affected component to ve...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

OpenSolon 安全漏洞

OpenSolon is a full-scenario Java enterprise application development framework open-sourced by OpenSolon. A security vulnerability exists in OpenSolon version 3.1.2, which stems from the presence of directory traversal in the solon-faas-luffy component, which could lead to a cross-site scripting...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

PT-2025-25410 · Unknown +1 · Solon-Faas-Luffy +1

Name of the Vulnerable Software and Affected Versions: solon version 3.1.2 Description: A Directory Traversal issue allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component. Recommendations: For solon version 3.1.2, consider restricting access to the solon-faas-luffy...

CVE-2023-35839

A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload...

GHSA-2M4Q-2C6R-HMC3 Solon Vulnerable to Path Traversal

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function rendermav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads ...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal through the rendermav function. An attacker can access or modify files on the server by manipulating the input to traverse outside the intended directory structure. Remediation Upgrade org.noear:solon-view-beetl ...

Solon Vulnerable to Path Traversal

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function rendermav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads ...

Path Traversal

org.noear:solon-web-staticfiles is vulnerable to Path Traversal. The vulnerability is due to improper validation of user-supplied file paths in StaticMappings.java, allowing an attacker to access arbitrary files using "../filedir"...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal through the manipulation of the file path in StaticMappings.java using a relative path such as '../filedir'. An attacker can access files and directories stored outside of the web server's root directory by...

Solon Path Traversal

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...