Skip to content
OpenAdvisories

Package · PyPI

weave

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2024-7340 Scanner template

    W&B Weave server remote arbitrary file leak and privilege escalation

    The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume th…

    weave PyPI