CRITICAL9.3PyPI
GHSA-qp72-96p2-g644· CVE-2022-31558, PYSEC-2026-541Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely
Modified: 6/29/2026
package
PyPI/shiva
pkg:pypi/shiva
CRITICAL9.3PyPI
PYSEC-2026-541· CVE-2022-31558, GHSA-qp72-96p2-g644Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely
Modified: 7/1/2026