https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T03:52:36.571381+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2024-37273 fkie_cve-2024-37273 2026-09-30T03:52:36.597914+00:00

An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

 https://db.gcve.eu/vuln/ghsa-878h-rqcq-mv3x GHSA-878h-rqcq-mv3x — Jan path traversal vulnerability 2026-09-30T03:52:36.597985+00:00

Affected: npm: @janhq/core

An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.