Read the docs

input-leap

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

input-leap records in CISA KEV

No input-leap vulnerabilities are listed in CISA KEV.

Records

1 record

Priority LOW 25

Input Leap (aka input-leap) through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with resultant code execution i…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00652 Published 2026-09-25 No fix listed CWE-180
Open these records in search →