Approved changes feed: RSS · Atom

cpe:2.3:a:jane-xiaoer:skill-vision-control:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJane Xiaoer (4fc1dc92-3ec3-5fae-aae2-3278d0d649a4)
ProductSkill Vision Control (c7f2f6a5-8d47-504a-9c42-0e9cbe803ee6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-19335 vulnerable 2026-09-16 04:34:15.279508 Jane-xiaoer skill-vision-control config.ts getSkillVersionsDir path traversal
MEDIUM (5.3)
A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-08-09T05:15:09.473Z
Updated: 2026-08-13T19:37:18.682Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.