Threats tagged 'ghsa-pfpf-25qg-8vx8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.2	CVE-2026-129167Seafile SeaDoc converter 2.0.4 before 2.0.11 and 3.0.0 before 3.0.8 contains an absolute path traversal vulnerability Critical9.22026-11-13GCVE DatabaseCVE-2026-129167 Seafile SeaDoc converter versions 2.0.4 before 2.0.11 and 3.0.0 before 3.0.8 contain an absolute path traversal vulnerability. This flaw allows unauthenticated attackers with a public share token to execute arbitrary code by supplying an absolute filename to a specific API endpoint, leading to extraction of a ZIP file into the Python library path and subsequent module import triggering code execution. Report on CVE-2026-129167 Vulnerability CWE-36 #ghsa-pfpf-25qg-8vx8	GCVE Database	2026-11-13

Page 1 of 1