io.github.wwwlike:vlife-boot-starter-web (>=1.0.4, <=1.0.7), io.github.wwwlike:vlife-core (>=1.0.4, <=1.0.7) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (>=1.0.4, <=1.0.7)

io.github.wwwlike:vlife-base MAVEN version =1.0.4, =1.0.4, =1.0.4, =1.0.4, =1.0.2, =1.0.7 Source cves: CVE-2025-13266 Source advisory: SNYK:JAVA-IOGITHUBWWWLIKE-14038399...

io.github.wwwlike:vlife-boot-starter-web (1.0.4), io.github.wwwlike:vlife-core (1.0.4) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.4)

io.github.wwwlike:vlife-base MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.4 - io.github.wwwlike:vlife-core 1.0.4 -...

GHSA-CG6M-9276-QPJJ vlife-base has Path Traversal vulnerability

A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to...

vlife-base has Path Traversal vulnerability

A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to...