CVE-2022-31548

9.3

CRITICALCVSS v3

Published

July 11, 2022

CVSS v2

6.4 MEDIUM

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

GitHubResources related to GitHub Security Lab

NVD

NPMOpen NPM package/module homepage url from NPM registry. Support CLI and Promises

<= 2017-03-06NVD

Python Package Index

A simple flask webapp to download the audio track from almost any internet video.

<= 2017-03-06NVD

GitHubFaster package homepage open(er). Support CLI and Promises

<= 2017-03-06NVD