Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 22:57:31 +0000 CVE-2022-35410 https://vulnerability.circl.lu/vuln/cve-2022-35410 <p>mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.</p> <p>mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.</p> https://vulnerability.circl.lu/vuln/cve-2022-35410 GHSA-f33p-9287-h552 — mat2 before 0.13.0 allows directory traversal during the ZIP archive cleaning process. https://vulnerability.circl.lu/vuln/ghsa-f33p-9287-h552 <p><strong>Affected:</strong> PyPI: mat2</p> <p>mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows `../` directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.</p> <p><strong>Affected:</strong> PyPI: mat2</p> <p>mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows `../` directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.</p> https://vulnerability.circl.lu/vuln/ghsa-f33p-9287-h552 PYSEC-2022-223 https://vulnerability.circl.lu/vuln/pysec-2022-223 <p><strong>Affected:</strong> PyPI: mat2</p> <p>mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.</p> <p><strong>Affected:</strong> PyPI: mat2</p> <p>mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.</p> https://vulnerability.circl.lu/vuln/pysec-2022-223