VYPR

marker

by Datalab To

CVEs (1)

  • CVE-2026-85684CriSep 4, 2026
    risk 0.59cvss 9.1epss

    marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location…