Critical severity9.3NVD Advisory· Published Jul 11, 2022· Updated Jun 17, 2026

CVE-2022-31518

Description

The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Affected products

JustAnotherSoftwareDeveloper/Python-Recipe-Databasellm-fuzzy2 versions
<=2021-03-31+ 1 more
- (no CPE)range: <=2021-03-31
- (no CPE)
Python Recipe Database Project/Python Recipe Database
cpe:2.3:a:python-recipe-database_project:python-recipe-database:*:*:*:*:*:*:*:*
Range: <=2021-03-31

Patches

Vulnerability mechanics

References

github.com/github/securitylab/issues/669nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.605
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000