VYPR

wormnest

by operatorequals

CVEs (1)

  • CVE-2022-31502CriJul 11, 2022
    risk 0.00cvss 9.3epss 0.01

    The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.