SHIRASAGI Project vulnerabilities
We track 3 vulnerabilities in SHIRASAGI Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest SHIRASAGI Project vulnerabilities
- 8.7 High severity
SHIRASAGI: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.
- 7.5 High severity
SHIRASAGI: Improper Limitation of a Pathname to a Restricted Directory
SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests.
- 8.8 High severity
SHIRASAGI: Improper Limitation of a Pathname to a Restricted Directory
Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.