PVE-2022-49498

Advisory

Nvflare 2.1.1 fixes a bug in 'ls' command that allowed path traversal attacks. https://g…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Please see [the document](https://nvflare.readthedocs.io/en/2.1.1/) for more details. W…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://pypi.org/project/nvflare
• https://pyup.io/changelogs/nvflare/