Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

pandora-analysis vulnerabilities

5 published CVEs name pandora-analysis among the affected products.

Newest CVEs

  • CVE-2026-88069

    Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis

    pandora-analysis · pandora

    Critical9.3
  • CVE-2026-75531

    Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora

    pandora-analysis · pandora

    High7.0
  • CVE-2026-75529

    Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora

    pandora-analysis · pandora

    Medium6.9
  • CVE-2026-74767

    Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb

    pandora-analysis · pandora

    High8.7
  • CVE-2026-74764

    Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora

    pandora-analysis · pandora

    Critical10.0