Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-29 (路径遍历：’..filename’) — Vulnerability Class 61

61 vulnerabilities classified as CWE-29 (路径遍历：’..filename’). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2026-5627 Path Traversal in mintplex-labs/anything-llm — mintplex-labs/anything-llm 9.1AICriticalAI2026-04-07
CVE-2025-15036 Path Traversal Vulnerability in mlflow/mlflow — mlflow/mlflow 8.4 -2026-03-30
CVE-2026-30828 Wallos: SSRF via url parameter leading to File Traversal — Wallos 7.5 -2026-03-07
CVE-2025-66608 Yokogawa FAST/TOOLS 安全漏洞 — FAST/TOOLS 9.1AICriticalAI2026-02-09
CVE-2024-2356 Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui — parisneo/lollms-webui 9.8AICriticalAI2026-02-02
CVE-2025-12790 Rubygem-mqtt: rubygem-mqtt hostname validation — ruby-mqtt 7.4 High2025-11-06
CVE-2025-58291 Huawei HarmonyOS 安全漏洞 — HarmonyOS 3.3 Low2025-10-11
CVE-2025-50185 DbGate allows Unauthorized File Access via CSV Plugin — dbgate 6.5 -2025-07-26
CVE-2025-50184 DbGate allows for File Traversal via file parameter — dbgate 7.5 -2025-07-26
CVE-2025-6209 Arbitrary File Read through Path Traversal in run-llama/llama_index — run-llama/llama_index 7.5 -2025-07-07
CVE-2024-8248 Path Traversal in mintplex-labs/anything-llm — mintplex-labs/anything-llm 8.8 -2025-03-20
CVE-2024-10648 Path Traversal in gradio-app/gradio — gradio-app/gradio 9.1 -2025-03-20
CVE-2024-8537 Path Traversal in modelscope/agentscope — modelscope/agentscope 9.1 -2025-03-20
CVE-2024-12389 Path Traversal in binary-husky/gpt_academic — binary-husky/gpt_academic 9.8 -2025-03-20
CVE-2024-8982 Local File Inclusion in bentoml/openllm — bentoml/openllm 9.8 -2025-03-20
CVE-2024-7957 Arbitrary File Overwrite in danswer-ai/danswer — danswer-ai/danswer 8.1 -2025-03-20
CVE-2024-7033 Arbitrary File Write in open-webui/open-webui — open-webui/open-webui 9.8 -2025-03-20
CVE-2024-8859 Path Traversal in mlflow/mlflow — mlflow/mlflow 7.5 -2025-03-20
CVE-2024-11170 Path Traversal in danny-avila/librechat — danny-avila/librechat 9.8 -2025-03-20
CVE-2024-13059 Path Traversal in mintplex-labs/anything-llm — mintplex-labs/anything-llm 7.2 -2025-02-10
CVE-2024-51534 Dell PowerProtect Data Domain 安全漏洞 — PowerProtect DD 7.1 High2025-02-01
CVE-2024-21542 Luigi 安全漏洞 — luigi 8.6 High2024-12-10
CVE-2024-7774 Path Traversal in langchain-ai/langchainjs — langchain-ai/langchainjs 9.8AICriticalAI2024-10-29
CVE-2024-7962 Arbitrary File Read via Insufficient Validation in gaizhenbiao/chuanhuchatgpt — gaizhenbiao/chuanhuchatgpt 6.2AIMediumAI2024-10-29
CVE-2024-6394 Local File Inclusion in parisneo/lollms-webui — parisneo/lollms-webui 7.5 -2024-09-30
CVE-2024-6396 Arbitrary File Overwrite and Data Exfiltration in aimhubio/aim — aimhubio/aim 10.0 -2024-07-12
CVE-2024-5926 Path Traversal in stitionai/devika — stitionai/devika 9.1AICriticalAI2024-06-30
CVE-2024-6139 Path Traversal in parisneo/lollms — parisneo/lollms 5.3AIMediumAI2024-06-27
CVE-2024-4841 Path Traversal in parisneo/lollms-webui — parisneo/lollms-webui 7.5 -2024-06-23
CVE-2024-5443 Remote Code Execution via Path Traversal in parisneo/lollms — parisneo/lollms 9.1 -2024-06-22

Vulnerabilities classified as CWE-29 (路径遍历：’..filename’) represent 61 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.