GCVE - cpe:2.3:a:invesalius:invesalius:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:invesalius:invesalius:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Invesalius (`635ee9f7-7324-5787-a3ca-a2c91597e70a`)
Product	Invesalius (`aed6db18-ddcf-5084-bf2c-39321f3ab3ca`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-44825`	vulnerable	2026-06-08 06:45:54.204341	Details available Directory Traversal vulnerability in Centro de Tecnologia da Informaco Renato Archer InVesalius3 v3.1.99995 allows attackers to write arbitrary files unto the system via a crafted .inv3 file. Published: 2024-09-25T00:00:00.000Z Updated: 2026-02-13T16:54:03.691Z Open on db.gcve.eu Reference links https://github.com/invesalius/invesalius3 https://github.com/partywavesec/invesalius3_vulnerabilities/tree/main/CVE-2024-44825 https://www.partywave.site/show/research/cve-2024-44825-invesalius-arbitrary-file-write-and-directory-traversal	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-42845`	vulnerable	2026-06-08 06:45:47.068372	Details available An eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 allows attackers to execute arbitrary code via loading a crafted DICOM file. Published: 2024-08-23T00:00:00.000Z Updated: 2026-02-13T16:46:20.371Z Open on db.gcve.eu Reference links https://github.com/invesalius/invesalius3 https://github.com/invesalius/invesalius3/releases https://github.com/partywavesec/invesalius3_vulnerabilities/tree/main/CVE-2024-42845 https://www.partywave.site/show/research/tic-tac-beware-of-your-scan	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.