cyclonedx-bom-repo-server vulnerabilities
1 known vulnerability in cyclonedx-bom-repo-server from CycloneDX. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest first
- 8.1 High severity
cyclonedx-bom-repo-server: Improper Limitation of a Pathname to a Restricted Directory
CycloneDX BOM Repository Server is a bill of materials (BOM) repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version 2.0.1 has an improper input validation vulnerability leading to path traversal. A malicious user may