Read the docs

frostming

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

frostming records in CISA KEV

No frostming vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pdm 1 record LOW Unearth 1 record LOW

Records

2 records

TI-2026-51239 CVE-2026-73030 · GHSA-2fcv-9f95-p67v

unearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape

Priority HIGH 65

unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory con…

CVSS 4.0HIGH 7.2 Network No auth User interaction EPSS 0.00594 Published 2026-08-10 Fixed CWE-22
TI-2023-24566 CVE-2023-45805 · GHSA-j44v-mmf2-xvm9

Trojan Lockfilein pdm

Priority LOW 36

pdm is a Python package and dependency manager supporting the latest PEP standards.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00452 Published 2023-10-20 Fixed in 2.9.4 CWE-20
Open these records in search →