Zepspaiva vulnerabilities
We track 1 vulnerability in Zepspaiva products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Zepspaiva vulnerabilities
- 9.8 Critical severity
doc-recog: Improper Neutralization of Special Elements used in an OS Command
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog() or tag(). Attackers can embed $(...) or backtick command substitution in the file path, which DocDat