invesalius vulnerabilities

2 known vulnerabilities in invesalius from Invesalius. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  invesalius: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-44825Sep 25, 2024Invesalius

  Directory Traversal vulnerability in Centro de Tecnologia da Informaco Renato Archer InVesalius3 v3.1.99995 allows attackers to write arbitrary files unto the system via a crafted .inv3 file.

• 8.0 High severity

  invesalius: Improper Control of Generation of Code

  CVE-2024-42845Aug 23, 2024InvesaliusEPSS 2.74%

  An eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 allows attackers to execute arbitrary code via loading a crafted DICOM file.