Skip to content
OpenAdvisories

Package · PyPI

reachy-mini

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Reachy Mini: Unrestricted Upload of File with Dangerous Type

    Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the upload_sound method in src/reachy_mini/daemon/app/routers/media.py without authentication, file-e…