EUVD-2024-21976

Malicious code in bioql PyPI...

CVE-2024-24569

Summary : CVE-2024-24569 concerns the Pixee Java Code Security Toolkit. The vulnerability lies in ZipSecurity#isBelowCurrentDirectory and affects toolkit versions ≤ 1.1.1. Technical details (from provided sources) : The partial-path traversal bypass can be triggered when an application uses the t...

Java Code Security Toolkit Path Traversal Vulnerability

The Java Code Security Toolkit is a set of security APIs designed to help secure Java code. A path traversal vulnerability exists in Java Code Security Toolkit 1.1.1 and prior versions, which stems from ZipSecurityisBelowCurrentDirectory being susceptible to a partial path traversal vulnerability...