Pandora-Analysis Pandora
5 CVEs affecting Pandora-Analysis Pandora. Latest disclosed: 2026-09-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-88069 | | 2026-09-09 | Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlle… | |
CVE-2026-75531 | | 2026-08-17 | Pandora contains a stored cross-site scripting (XSS) vulnerability in the rendering of URL observables. A URL extracted from or associated with an analyzed fil… | |
CVE-2026-75529 | | 2026-08-17 | Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies th… | |
CVE-2026-74767 | | 2026-08-15 | Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA arch… | |
CVE-2026-74764 | | 2026-08-15 | Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed arch… |