Skip to content
OpenAdvisories

Package · PyPI

lektor

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2024-28335

    Lektor does not sanitize database path traversal

    Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost …

    lektor lektor Ubuntu PyPI