WanderingAstronomer vulnerabilities
We track 1 vulnerability in WanderingAstronomer products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest WanderingAstronomer vulnerabilities
- 7.1 High severity
Vociferous: Improper Limitation of a Pathname to a Restricted Directory
Vociferous provides cross-platform, offline speech-to-text with local AI refinement. Prior to 4.4.2, the vulnerability exists in src/api/system.py within the export_file route. The application accepts a JSON payload containing a filename and content. While the