Skip to content
OpenAdvisories

Product · stitionai

stitionai/devika

12 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.1

    Path Traversal in stitionai/devika

    A path traversal vulnerability exists in stitionai/devika, specifically in the project creation functionality. In the affected version beacf6edaa205a5a5370525407a6db45137873b3, the project name is not validated, allowing an attacker to create a project with a…

  • Critical 9.1

    Path Traversal in stitionai/devika

    A path traversal vulnerability in the get-project-files functionality of stitionai/devika allows attackers to read arbitrary files from the filesystem and cause a Denial of Service (DoS). This issue is present in all versions of the application. The vulnerabi…