Vulnerabilities in pandora-analysis

5 results

CVE-2026-74764CRITICALPath Traversal in TAR Archive Extraction Allows Arbitrary File Write in PandoraEPSS 0.6%CVE-2026-88069CRITICALPath traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysisEPSS 0.5%CVE-2026-75529MEDIUMStored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of PandoraEPSS 0.4%CVE-2026-75531HIGHStored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in PandoraEPSS 0.4%CVE-2026-74767HIGHUnbounded DAA Decompression in Pandora Allows Denial of Service via Decompression BombEPSS 0.4%