Skip to content
OpenAdvisories

Vendor

dropbox

9 known vulnerabilities.

Products

esaml 4 samly 2 merou 1 Dropbox Desktop 1 mcp-server-dash 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-28809

    XXE in esaml SAML library allows local file read and potential SSRF

    XML External Entity (XXE) vulnerability in esaml (and its forks) allows an attacker to cause the system to read local files and incorporate their contents into processed SAML documents, and potentially perform SSRF via crafted SAML messages. esaml parses atta…

    dropbox handnot2 arekinath Jump-App Hex
  • Medium 6.3
    CVE-2022-4768

    Dropbox merou SSH Public Key public_key.py add_public_key injection

    A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function add_public_key of the file grouper/public_key.py of the component SSH Public Key Handler. The manipulation of the argument public_key_str leads to injecti…

    dropbox merou