Headline
GHSA-7488-6x3r-23w5: Path Traversal in ganga
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Path Traversal in ganga
Moderate severity GitHub Reviewed Published Jul 13, 2022 • Updated Jul 13, 2022
Related news
CVE-2022-31507: # Absolute Path Traversal due to incorrect use of `send_file` call (#… · ganga-devs/ganga@730e7ab
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.