Approved changes feed: RSS · Atom

cpe:2.3:a:geyang:ml-logger:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGeyang (2d7e8541-07f3-5122-99dd-abe3f5206502)
ProductMl Logger (9aa29ba9-5bfa-5979-8930-41288c6de897)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10952 vulnerable 2026-06-08 07:02:27.851596 geyang ml-logger File server.py stream_handler information disclosure
MEDIUM (5.3)
A security flaw has been discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this issue is the function stream_handler of the file ml_logger/server.py of the component File Handler. Performing manipulation of the argument key results in information disclosure. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Published: 2025-09-25T15:32:05.845Z
Updated: 2025-09-25T15:47:56.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10951 vulnerable 2026-06-08 07:02:27.851242 geyang ml-logger server.py log_handler path traversal
HIGH (7.3)
A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vulnerability is the function log_handler of the file ml_logger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Published: 2025-09-25T15:02:06.416Z
Updated: 2025-09-26T18:07:15.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10950 vulnerable 2026-06-08 07:02:27.850835 geyang ml-logger Ping server.py log_handler deserialization
MEDIUM (6.3)
A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function log_handler of the file ml_logger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
Published: 2025-09-25T14:32:09.236Z
Updated: 2025-09-25T15:48:44.772Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.