Combust

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Combust records in CISA KEV

No Combust vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mleap 1 record MEDIUM

Records

1 record in Mleap · all components

TI-2023-04822 CVE-2023-5245 · GHSA-897x-xvj8-42rq

Path traversal in ml.combust.mleap.mleap-tensorflow

MEDIUM 44

FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01186 Published 2023-11-15 Fixed in 0.23.1 CWE-22

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0