Perspective-dev vulnerabilities
We track 3 vulnerabilities in Perspective-dev products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 4, 2026.
Latest Perspective-dev vulnerabilities
- 7.5 High severity
perspective: Improper Limitation of a Pathname to a Restricted Directory
Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ segments in HTTP request URL paths. Attackers can bypass the insufficient query-s
- 7.5 High severity
perspective: Incomplete Identification of Uploaded File Variables (PHP)
Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed
- 8.8 High severity
perspective: Improper Neutralization of Directives in Dynamically Evaluated Code
Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied inpu