Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Orchest
Orchest vulnerabilities
Products
Orchest
2
Newest
orchest
orchest vulnerable to cross-site request forgery that allows control of a user instance
CVE-2022-39268
8.1
High
September 30, 2022
orchest
The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31503
9.3
Critical
July 11, 2022
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open