Harveyzyh Python Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Harveyzyh Python Project records in CISA KEV

No Harveyzyh Python Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Harveyzyh Python · all components

TI-2022-13441 CVE-2022-31516 · GHSA-ppww-x8j3-f268

MEDIUM 43

The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01337 Published 2022-07-11 No fix listed CWE-22