SHIRASAGI vulnerabilities

3 known vulnerabilities in SHIRASAGI from SHIRASAGI Project. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  SHIRASAGI: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-118869Nov 5, 2026SHIRASAGI ProjectEPSS 1.06%

  An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.

• 7.5 High severity

  SHIRASAGI: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-46898Oct 15, 2024SHIRASAGI ProjectEPSS 1.03%

  SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests.

• 8.8 High severity

  SHIRASAGI: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-39448Sep 5, 2023SHIRASAGI ProjectEPSS 1.3%

  Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.