CVE-2022-31558

The tooxie/shiva-server project (GitHub) up to version 0.10.0 is affected by an absolute path traversal due to unsafe use of Flask’s send_file. This is corroborated by multiple sources (NVD, Red Hat, GHSA advisory, OSV, CVE CVE lists). Impact: potential unauthorized access to files via network ac...