Blossom vulnerabilities
We track 1 vulnerability in Blossom products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 17, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Blossom vulnerabilities
- 8.8 High severity
Blossom: Improper Limitation of a Pathname to a Restricted Directory
A flaw has been found in Blossom up to 1.17.1. This issue affects the function put of the file blossom-backend/common/common-iaas/src/main/java/com/blossom/common/iaas/blos/BLOSManager.java of the component File Upload. This manipulation causes path traversal.