Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-31506

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-x2pc-fqrw-hc7f

SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. A patch is available on the `master` branch of the repository.

gitlab/pypi/opendiamond/CVE-2022-31506

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.