operatorequals/wormnest

operatorequals/wormnest

Releases16
Frequency1 month 3 weeks
Last Release
Stars21
A Web Server to hide stuff

CVE History

CVEPublishedCVSS v3CVSS v2
9.3 CRITICAL6.4 MEDIUM

The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.