PYSEC-2025-67

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used...

PT-2025-26240 · Upsonic · Upsonic

Name of the Vulnerable Software and Affected Versions: Upsonic versions up to 0.55.6 Description: A critical vulnerability was found in Upsonic, affecting the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit...