Approved changes feed: RSS · Atom

cpe:2.3:a:ferry_project:ferry:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorFerry Project (a69994b0-9ac7-51a0-a932-d50fc5f066b5)
ProductFerry (db3ae6ad-0a0c-5b4e-a2e0-6db22c3dcf7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/lanyulei/ferry purl2cpe 2026-06-01 10:18:16.078499

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3940 vulnerable 2026-06-08 05:48:22.672033 lanyulei ferry task.go path traversal
LOW (3.5)
A vulnerability, which was classified as problematic, was found in lanyulei ferry. This affects an unknown part of the file apis/process/task.go. The manipulation of the argument file_name leads to path traversal. The associated identifier of this vulnerability is VDB-213447.
Published: 2022-11-11T00:00:00.000Z
Updated: 2025-04-15T13:17:07.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3939 vulnerable 2026-06-08 05:48:22.671506 lanyulei ferry API file.go path traversal
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the argument file leads to path traversal. The attack may be launched remotely. VDB-213446 is the identifier assigned to this vulnerability.
Published: 2022-11-11T00:00:00.000Z
Updated: 2025-04-15T13:17:15.576Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.