Skip to content
OpenAdvisories

Vendor

FlexGet

1 known vulnerabilities.

Products

FlexGet 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-113613

    FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin

    FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute …

    FlexGet FlexGet