← All advisories

Critical severity9.3NVD Advisory· Published Jul 11, 2022· Updated Jun 17, 2026

CVE-2022-31559

CVE-2022-31559

Description

The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Affected products

2

tsileo/flask-yeoman repositorydescription
tsileo/flask-yeomanllm-fuzzy
Range: <=2013-09-13

Patches

Vulnerability mechanics

References

1

github.com/github/securitylab/issues/669nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.