PyPI/upsonic CVE-2025-6278: critical 9.8
A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.fil
Action: Upgrade upsonic to 0.56.0 or later.
pip install upsonic==0.56.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.56.0 | - |
Fixed versions
| 0.56.0 |
Sources
- osv: PYSEC-2025-67
- https://vuldb.com/?ctiid.313282
- https://vuldb.com/?id.313282
- https://vuldb.com/?submit.593096
- https://github.com/Upsonic/Upsonic/issues/356
- https://github.com/advisories/GHSA-8jf4-fcjr-68c2
CVE-2025-6278 · published · modified · JSON