CIRCL

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

CIRCL records in CISA KEV

No CIRCL vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ail Framework 2 records LOW Cve-search 1 record LOW Pandora 1 record LOW

Records

1 record in Pandora · all components

TI-2023-09040 CVE-2023-22898 · GHSA-m7r3-6mr9-xj8f

workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of…

LOW 30

workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0064 Published 2023-01-10 No fix listed CWE-20

Open these records in search →

Critical	0
High	6
Medium	3
Low	0
No CVSS	0