Vulnerabilities (CVE)

Filtered by vendor Python-recipe-database Project Subscribe
Filtered by product Python-recipe-database
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-31518 1 Python-recipe-database Project 1 Python-recipe-database 2024-02-28 6.4 MEDIUM 9.3 CRITICAL
The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.