Skip to content
OpenAdvisories

Vendor

AsyncFuncAI

4 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    deepwiki-open - Unauthenticated Path Traversal Leading to Arbitrary File Write and Delete

    An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arbitrary files with root privileges. The api/api.py wiki-cache endpoint constructs file paths from use…