PyPI/chainerrl-visualizer CVE-2022-31573: critical 9.3, EPSS 1.40%
ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-687h-86vc-5x59
- https://nvd.nist.gov/vuln/detail/CVE-2022-31573
- https://github.com/github/securitylab/issues/669#issuecomment-1117265726
- https://github.com/chainer/chainerrl-visualizer
CVE-2022-31573 · published · modified · JSON