Flightcrew Project Flightcrew — known CVE vulnerabilities

Every CVE whose affected-product data names Flightcrew Project Flightcrew, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-13241 — CVSS 7.8 (high): FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash)…
• CVE-2019-14452 — CVSS 7.5 (high): Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP…
• CVE-2019-13032 — CVSS 5.5 (medium): An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() or…