Skip to content
OpenAdvisories

Vendor

hanxi

1 known vulnerabilities.

Products

xiaomusic 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-10108

    xiaomusic 0.5.7 Path Traversal via GET /music endpoint

    xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_path:path} endpoint that allows unauthenticated attackers to read arbitrary files outside the intended music directory by exploiting an incomplete path prefix ch…

    hanxi xiaomusic xiaomusic PyPI