~ / search / GHSA-694v-63fq-fmr4

GHSA-694v-63fq-fmr4

Path Traversal in scout-browser

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-1554

Packages

EcosystemPackageAffectedFixed in
PyPI scout-browser < 4.52 4.52

Details

As written in the advisory (Markdown source, shown as plain text).

Scout is a Variant Call Format (VCF) visualization interface. The Pypi package `scout-browser` is vulnerable to path traversal due to `send_file` call in versions prior to 4.52.

References

External links from the advisory. They lead to third-party sites.