Threats tagged 'ghsa-37c2-pxv8-c2mx'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.6%	CVE-2026-10595parisneo/lollms · Path Traversal Vulnerability Exists High7.5EPSS 0.6%2026-08-09GCVE DatabaseCVE-2026-10595 A path traversal vulnerability (CVE-2026-10595) exists in parisneo/lollms version 2.1.0 in the SPA catch-all route within backend/routers/ui.py. The vulnerability allows an unauthenticated attacker to read arbitrary files on the server by exploiting improper sanitization of user-controlled path input, specifically bypassing Starlette's path normalization with URL-encoded dot-dot sequences. This issue is resolved in version 3. EPSS 0.6%Report on CVE-2026-10595 Vulnerability CWE-23 #ghsa-37c2-pxv8-c2mx	GCVE Database	2026-08-09

Page 1 of 1