CRITICAL9.3PyPI
GHSA-qp72-96p2-g644· CVE-2022-31558, PYSEC-2026-541Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely
Modified: 6/29/2026
package
pkg:pypi/shiva
Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely
Modified: 6/29/2026
Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely
Modified: 7/1/2026