# CWE-29.

Every Advisory and CVE whose sources give the weakness CWE-29, newest first.

## Records, newest first

- [SonicWall NetExtender: A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor…](https://agentprime.io/advisories/CVE-2026-66152.md)
  `CVE-2026-66152` · CVE record: SonicWall NetExtender · CVSS 8.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-29
- [MLFlow Path Traversal Vulnerability](https://agentprime.io/advisories/GHSA-hh8p-p8mp-gqhm.md)
  `GHSA-hh8p-p8mp-gqhm`, `BIT-mlflow-2023-6975`, `CVE-2023-6975`, `PYSEC-2026-422` · PyPI `mlflow`: affected `<2.9.2`, fixed in `2.9.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: CWE-29
- [Remote Code Execution via path traversal bypass in lollms](https://agentprime.io/advisories/GHSA-mvrm-fh8q-6wr2.md)
  `GHSA-mvrm-fh8q-6wr2`, `CVE-2024-5443`, `PYSEC-2026-402` · PyPI `lollms`: affected `>=5.9.0, <9.5.1`, fixed in `9.5.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: CWE-29
- [decompress: Arbitrary File Write via Archive Extraction (Zip Slip)](https://agentprime.io/advisories/GHSA-h39j-r5qq-r9mm.md)
  `GHSA-h39j-r5qq-r9mm`, `CVE-2026-10732` · npm `decompress`: affected `<=4.2.1`, no fixed version yet · CVSS 6.1 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Path traversal, CWE-29
- [NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file.](https://agentprime.io/advisories/CVE-2026-24217.md)
  `CVE-2026-24217` · CVE record: NVIDIA BioNeMo Framework · CVSS 8.8 High · Not analysed yet · Published 20 May 2026 · Tags: CWE-29
- [Path Traversal in mintplex-labs/anything-llm](https://agentprime.io/advisories/CVE-2026-5627.md)
  `CVE-2026-5627` · CVE record: mintplex-labs mintplex-labs/anything-llm · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-29
- [MLFlow path traversal vulnerability](https://agentprime.io/advisories/GHSA-vhcx-3pq2-4fvc.md)
  `GHSA-vhcx-3pq2-4fvc`, `BIT-mlflow-2025-15036`, `CVE-2025-15036`, `PYSEC-2026-425` · PyPI `mlflow`: affected `<3.9.0rc0`, fixed in `3.9.0rc0` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2026 · Tags: Path traversal, CWE-29
- [Wallos: SSRF via url parameter leading to File Traversal](https://agentprime.io/advisories/CVE-2026-30828.md)
  `CVE-2026-30828` · CVE record: ellite Wallos · CVSS 8.7 High · Not analysed yet · Published 7 Mar 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-29
- [A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.](https://agentprime.io/advisories/CVE-2025-66608.md)
  `CVE-2025-66608` · CVE record: Yokogawa Electric Corporation FAST/TOOLS · CVSS 8.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: CWE-29
- [Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-2356.md)
  `CVE-2024-2356` · CVE record: parisneo parisneo/lollms-webui · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-29
- [MQTT does not validate hostnames](https://agentprime.io/advisories/GHSA-9c5q-w6gr-fxcq.md)
  `GHSA-9c5q-w6gr-fxcq`, `CVE-2025-12790` · RubyGems `mqtt`: affected `<0.7.0`, fixed in `0.7.0` · CVSS 7.4 High · Not analysed yet · Published 6 Nov 2025 · Tags: CWE-29
- [Denial of service (DoS) vulnerability in the office service.](https://agentprime.io/advisories/CVE-2025-58291.md)
  `CVE-2025-58291` · CVE record: Huawei HarmonyOS · CVSS 3.3 Low · Not analysed yet · Published 11 Oct 2025 · Tags: CWE-29
- [DbGate allows Unauthorized File Access via CSV Plugin](https://agentprime.io/advisories/CVE-2025-50185.md)
  `CVE-2025-50185` · CVE record: dbgate dbgate · CVSS 7.0 High · Not analysed yet · Published 26 Jul 2025 · Tags: CWE-29
- [DbGate allows for File Traversal via file parameter](https://agentprime.io/advisories/CVE-2025-50184.md)
  `CVE-2025-50184` · CVE record: dbgate dbgate · CVSS 7.1 High · Not analysed yet · Published 26 Jul 2025 · Tags: CWE-29
- [LlamaIndex vulnerable to Path Traversal attack through its encode_image function](https://agentprime.io/advisories/GHSA-2rhq-96q8-4vjq.md)
  `GHSA-2rhq-96q8-4vjq`, `CVE-2025-6209`, `PYSEC-2025-65`, `PYSEC-2026-1558` · PyPI `llama-index-core`: affected `>=0.11.23, <0.12.41`, fixed in `0.12.41` · CVSS 7.5 High · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-29
- [MLflow has a Local File Read/Path Traversal in dbfs](https://agentprime.io/advisories/GHSA-4rqf-8pfm-p36r.md)
  `GHSA-4rqf-8pfm-p36r`, `BIT-mlflow-2024-8859`, `CVE-2024-8859`, `PYSEC-2026-1638` · PyPI `mlflow`: affected `<2.17.0rc0`, fixed in `2.17.0rc0` · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2025 · Tags: Path traversal, CWE-29
- [AgentScope path traversal vulnerability](https://agentprime.io/advisories/GHSA-c4cc-w454-4634.md)
  `GHSA-c4cc-w454-4634`, `CVE-2024-8537`, `PYSEC-2026-254` · PyPI `agentscope`: affected `<=0.1.1`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2025 · Tags: Path traversal, CWE-29
- [Aim path traversal in LockManager.release_locks](https://agentprime.io/advisories/GHSA-4qcx-jx49-6qrh.md)
  `GHSA-4qcx-jx49-6qrh`, `CVE-2024-8769`, `PYSEC-2026-258` · PyPI `aim`: affected `>=3.15.0, <=3.27.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2025 · Tags: Path traversal, CWE-29
- [Withdrawn Advisory: Open WebUI Allows Arbitrary File Write via the \`download_model\` Endpoint](https://agentprime.io/advisories/GHSA-3p9q-7w63-3f8q.md)
  `GHSA-3p9q-7w63-3f8q`, `CVE-2024-7033`, `PYSEC-2026-1719` · PyPI `open-webui`: affected `<=0.3.8`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-29
- [Gradio Vulnerable to Arbitrary File Deletion](https://agentprime.io/advisories/GHSA-pgfv-gvc5-prfg.md)
  `GHSA-pgfv-gvc5-prfg`, `CVE-2024-10648`, `PYSEC-2026-1417` · PyPI `gradio`: affected `>=4.0.0, <=5.0.0b2`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-29
- [Path Traversal in mintplex-labs/anything-llm](https://agentprime.io/advisories/CVE-2024-8248.md)
  `CVE-2024-8248` · CVE record: mintplex-labs mintplex-labs/anything-llm · CVSS 7.2 High · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-29
- [Path Traversal in binary-husky/gpt_academic](https://agentprime.io/advisories/CVE-2024-12389.md)
  `CVE-2024-12389` · CVE record: binary-husky binary-husky/gpt_academic · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-29
- [Local File Inclusion in bentoml/openllm](https://agentprime.io/advisories/CVE-2024-8982.md)
  `CVE-2024-8982` · CVE record: bentoml bentoml/openllm · CVSS 6.2 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-29
- [Arbitrary File Overwrite in danswer-ai/danswer](https://agentprime.io/advisories/CVE-2024-7957.md)
  `CVE-2024-7957` · CVE record: danswer-ai danswer-ai/danswer · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-29
- [Path Traversal in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-11170.md)
  `CVE-2024-11170` · CVE record: danny-avila danny-avila/librechat · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-29
- [Path Traversal in mintplex-labs/anything-llm](https://agentprime.io/advisories/CVE-2024-13059.md)
  `CVE-2024-13059` · CVE record: mintplex-labs mintplex-labs/anything-llm · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.24 · Not analysed yet · Published 10 Feb 2025 · Tags: CWE-29
- [Dell PowerProtect DD: Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50…](https://agentprime.io/advisories/CVE-2024-51534.md)
  `CVE-2024-51534` · CVE record: Dell PowerProtect DD · CVSS 7.1 High · Not analysed yet · Published 1 Feb 2025 · Tags: CWE-29
- [Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the \_extract_packages_archive...](https://agentprime.io/advisories/GHSA-8qch-vj6m-2694.md)
  `GHSA-8qch-vj6m-2694`, `CVE-2024-21542`, `PYSEC-2024-159` · PyPI `luigi`: affected `<3.6.0`, fixed in `3.6.0` · CVSS 7.7 High · Not analysed yet · Published 10 Dec 2024 · Tags: Path traversal, CWE-29
- [Langchain Path Traversal vulnerability](https://agentprime.io/advisories/GHSA-hc5w-c9f8-9cc4.md)
  `GHSA-hc5w-c9f8-9cc4`, `CVE-2024-7774` · npm `langchain`: affected `<0.2.19`, fixed in `0.2.19` · CVSS 6.5 Medium · Not analysed yet · Published 29 Oct 2024 · Tags: Path traversal, CWE-29
- [An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matc...](https://agentprime.io/advisories/PYSEC-2024-112.md)
  `PYSEC-2024-112`, `CVE-2024-7962` · PyPI `chuanhuchatgpt`: affected `*`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2024 · Tags: CWE-29
- [Local File Inclusion in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-6394.md)
  `CVE-2024-6394` · CVE record: parisneo parisneo/lollms-webui · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2024 · Tags: CWE-29
- [Arbitrary File Overwrite and Data Exfiltration in aimhubio/aim](https://agentprime.io/advisories/CVE-2024-6396.md)
  `CVE-2024-6396` · CVE record: aimhubio aimhubio/aim · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.53 · Not analysed yet · Published 12 Jul 2024 · Tags: CWE-29
- [Path Traversal in stitionai/devika](https://agentprime.io/advisories/CVE-2024-5926.md)
  `CVE-2024-5926` · CVE record: stitionai stitionai/devika · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2024 · Tags: CWE-29
- [lollms vulnerable to dot-dot-slash path traversal in XTTS server](https://agentprime.io/advisories/GHSA-w9qf-83jg-2x6c.md)
  `GHSA-w9qf-83jg-2x6c`, `CVE-2024-6139`, `PYSEC-2026-1594` · PyPI `lollms`: affected `<=9.5.1`, no fixed version yet · CVSS 7.3 High · Not analysed yet · Published 27 Jun 2024 · Tags: CWE-29
- [Path Traversal in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-4841.md)
  `CVE-2024-4841` · CVE record: parisneo parisneo/lollms-webui · CVSS 4.0 Medium · Not analysed yet · Published 23 Jun 2024 · Tags: CWE-29
- [Zip slip in opencart](https://agentprime.io/advisories/GHSA-m7r8-2r98-vppj.md)
  `GHSA-m7r8-2r98-vppj`, `BIT-opencart-2024-21518`, `CVE-2024-21518`, `PKSA-cpgb-zy75-4rpw` · Packagist `opencart/opencart`: affected `>=4.0.0.0`, no fixed version yet · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.14 · Not analysed yet · Published 22 Jun 2024 · Tags: Path traversal, Authentication bypass, CWE-29
- [Path Traversal to Arbitrary File Read/Delete/Overwrite, DoS Attack, and Admin Account Takeover in mintplex-labs/anything-llm](https://agentprime.io/advisories/CVE-2024-5211.md)
  `CVE-2024-5211` · CVE record: mintplex-labs mintplex-labs/anything-llm · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jun 2024 · Tags: CWE-29
- [LoLLMS Path Traversal vulnerability](https://agentprime.io/advisories/GHSA-3x47-w4rx-6pm7.md)
  `GHSA-3x47-w4rx-6pm7`, `CVE-2024-3429`, `PYSEC-2026-1583` · PyPI `lollms`: affected `<9.5.0`, fixed in `9.5.0` · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.28 · Not analysed yet · Published 6 Jun 2024 · Tags: Path traversal, CWE-29
- [A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failur...](https://agentprime.io/advisories/GHSA-j46q-5pxx-8vmw.md)
  `GHSA-j46q-5pxx-8vmw`, `BIT-mlflow-2024-2928`, `CVE-2024-2928`, `PYSEC-2024-242` · PyPI `mlflow`: affected `<2.11.3`, fixed in `2.11.3` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.22 · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-29
- [Path Traversal leading to Remote Code Execution in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-2360.md)
  `CVE-2024-2360` · CVE record: parisneo parisneo/lollms-webui · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-29
- [Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-4320.md)
  `CVE-2024-4320` · CVE record: parisneo parisneo/lollms-webui · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.34 · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-29
- [Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-2624.md)
  `CVE-2024-2624` · CVE record: parisneo parisneo/lollms-webui · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-29
- [TarSlip Vulnerability in deepjavalibrary/djl](https://agentprime.io/advisories/CVE-2024-2914.md)
  `CVE-2024-2914` · CVE record: deepjavalibrary deepjavalibrary/djl · CVSS 7.8 High · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-29
- [Path Traversal Vulnerability in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-2178.md)
  `CVE-2024-2178` · CVE record: parisneo parisneo/lollms-webui · CVSS 7.5 High · Not analysed yet · Published 2 Jun 2024 · Tags: CWE-29
- [A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of...](https://agentprime.io/advisories/GHSA-rfqq-wq6w-72jm.md)
  `GHSA-rfqq-wq6w-72jm`, `BIT-mlflow-2024-3848`, `CVE-2024-3848`, `PYSEC-2024-244` · PyPI `mlflow`: affected `<2.12.1`, fixed in `2.12.1` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.43 · Not analysed yet · Published 16 May 2024 · Tags: CWE-29
- [Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-2361.md)
  `CVE-2024-2361` · CVE record: parisneo parisneo/lollms-webui · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 May 2024 · Tags: CWE-29
- [Path Traversal in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-3435.md)
  `CVE-2024-3435` · CVE record: parisneo parisneo/lollms-webui · CVSS 8.4 High · Not analysed yet · Published 16 May 2024 · Tags: CWE-29
- [Path Traversal in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-4322.md)
  `CVE-2024-4322` · CVE record: parisneo parisneo/lollms-webui · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.31 · Not analysed yet · Published 16 May 2024 · Tags: CWE-29
- [Path Traversal leading to Remote Code Execution in parisneo/lollms-webui](https://agentprime.io/advisories/CVE-2024-2358.md)
  `CVE-2024-2358` · CVE record: parisneo parisneo/lollms-webui · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 May 2024 · Tags: CWE-29
- [An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18.](https://agentprime.io/advisories/CVE-2024-34470.md)
  `CVE-2024-34470` · CVE record · CVSS 8.6 High · Not analysed yet · Published 6 May 2024 · Tags: CWE-29
- [gradio vulnerable to Path Traversal](https://agentprime.io/advisories/GHSA-g9cj-cfpp-4g2x.md)
  `GHSA-g9cj-cfpp-4g2x`, `CVE-2024-1561`, `PYSEC-2026-1415` · PyPI `gradio`: affected `<4.13.0`, fixed in `4.13.0` · CVSS 7.5 High · Not analysed yet · Published 16 Apr 2024 · Tags: CWE-29
- [mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is\_...](https://agentprime.io/advisories/GHSA-hq88-wg7q-gp4g.md)
  `GHSA-hq88-wg7q-gp4g`, `BIT-mlflow-2024-3573`, `CVE-2024-3573`, `PYSEC-2024-243` · PyPI `mlflow`: affected `<2.10.0`, fixed in `2.10.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Apr 2024 · Tags: CWE-29
- [A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI ...](https://agentprime.io/advisories/GHSA-6h3f-43vq-53hj.md)
  `GHSA-6h3f-43vq-53hj`, `CVE-2024-2083`, `PYSEC-2024-247` · PyPI `zenml`: affected `<0.55.5`, fixed in `0.55.5` · CVSS 9.9 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.37 · Not analysed yet · Published 16 Apr 2024 · Tags: CWE-29
- [MLflow Local File Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-qg8p-32gr-gh6x.md)
  `GHSA-qg8p-32gr-gh6x`, `BIT-mlflow-2023-6977`, `CVE-2023-6977`, `PYSEC-2026-1659` · PyPI `mlflow`: affected `<2.9.2`, fixed in `2.9.2` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Dec 2023 · Tags: CWE-29
- [Path Traversal: '\\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.](https://agentprime.io/advisories/GHSA-5r3q-93q3-f978.md)
  `GHSA-5r3q-93q3-f978`, `BIT-mlflow-2023-6909`, `CVE-2023-6909`, `PYSEC-2023-252` · PyPI `mlflow`: affected `<2.9.2`, fixed in `2.9.2` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.90 · Not analysed yet · Published 18 Dec 2023 · Tags: CWE-29
- [Path Traversal: '\\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.](https://agentprime.io/advisories/GHSA-554w-xh4j-8w64.md)
  `GHSA-554w-xh4j-8w64`, `BIT-mlflow-2023-6831`, `CVE-2023-6831`, `PYSEC-2023-253` · PyPI `mlflow`: affected `<2.9.2`, fixed in `2.9.2` · CVSS 8.1 High · Not analysed yet · Published 15 Dec 2023 · Tags: CWE-29
- [H2O local file inclusion vulnerability](https://agentprime.io/advisories/GHSA-6mv8-95x5-xcq9.md)
  `GHSA-6mv8-95x5-xcq9`, `CVE-2023-6038` · Maven `ai.h2o:h2o-core`: affected `<=3.40.0.4`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Nov 2023 · Tags: Broken access control, CWE-29
- [Ray Path Traversal vulnerability](https://agentprime.io/advisories/GHSA-3pww-qvr8-6mhp.md)
  `GHSA-3pww-qvr8-6mhp`, `CVE-2023-6021`, `PYSEC-2026-515` · PyPI `ray`: affected `<2.8.1`, fixed in `2.8.1` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.37 · Not analysed yet · Published 16 Nov 2023 · Tags: Path traversal, CWE-29
- [ModelDB Local File Include](https://agentprime.io/advisories/CVE-2023-6023.md)
  `CVE-2023-6023` · CVE record: vertaai vertaai/modeldb · CVSS 8.6 High · Not analysed yet · Published 16 Nov 2023 · Tags: CWE-29
- [Path Traversal: '\\..\filename' in salesagility/suitecrm](https://agentprime.io/advisories/CVE-2023-6130.md)
  `CVE-2023-6130` · CVE record: salesagility salesagility/suitecrm · CVSS 7.5 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-29

Older: <https://agentprime.io/advisories/tag/cwe-29.md?cursor=WyIyMDIzLTExLTE0VDE2OjE5OjI5LjIwMjAwMFoiLCJDVkUtMjAyMy02MTMwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-29>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-29/>. Everything for agents: <https://agentprime.io/llms.txt>.