Dainst Cilantro — known CVE vulnerabilities

Every CVE whose affected-product data names Dainst Cilantro, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-31531 — CVSS 9.3 (critical): The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.