Approved changes feed: RSS · Atom

cpe:2.3:a:rasa:rasa_x:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRasa (0d7f599a-500a-5b30-9cfc-4f21700b8049)
ProductRasa X (344aabc7-9682-50f0-bcc2-554c017f4495)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/rasahq/rasa purl2cpe 2026-06-01 10:13:44.799621

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-42556 vulnerable 2026-06-08 05:35:22.341563 Details available
Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker has arbitrary write capability within specific directories via a crafted archive file.
Published: 2021-10-22T18:36:14.000Z
Updated: 2024-08-04T03:38:49.338Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.