Skip to content
OpenAdvisories

Vendor

emmett-framework

4 known vulnerabilities.

Products

granian 2 emmett 1 core 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-39847

    Emmett has a path traversal in internal assets handler

    Emmett is a full-stack Python web framework designed with simplicity. From 2.5.0 to before 2.8.1, the RSGI static handler for Emmett's internal assets (/__emmett__ paths) is vulnerable to path traversal attacks. An attacker can use ../ sequences (eg /__emmett…

    emmett-framework emmett emmett PyPI