Umbral Project Umbral — known CVE vulnerabilities

Every CVE whose affected-product data names Umbral Project Umbral, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-31533 — CVSS 9.3 (critical): The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is…