Mercadoenlineaback Project Mercadoenlineaback — known CVE vulnerabilities

Every CVE whose affected-product data names Mercadoenlineaback Project Mercadoenlineaback, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-31505 — CVSS 9.3 (critical): The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is…