CVE-2026-105174 | Gerapy up to 0.9.13 Project Management views.py project_create project_name path traversal (Issue 317)

SecurityVulns
Yanac

A vulnerability classified as problematic has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument project_name leads to path traversal.

This vulnerability is referenced as CVE-2026-105174. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More