Jh4Nks

**Name of the Vulnerable Software and Affected Versions** pydicom versions 2.0.0-rc.1 through 3.0.1 **Description** pydicom is susceptible to a path traversal issue when processing maliciously crafted DICOM files. Specifically, a crafted `DICOMDIR` can set `ReferencedFileID` to a path outside the expected File-set root. The software only verifies the existence of the path but does not confirm that it remains within the designated root directory. Subsequent operations like `copy()`, `write()`, and `remove()+write(use existing=True)` then utilize this unchecked path for file I/O, potentially allowing arbitrary file read, copy, move, or deletion outside the intended File-set root. This is due to the lack of a containment check to ensure the resolved path is within the File-set root. A realistic scenario involves a user uploading a malicious DICOM File-set zip, which the server then loads and re-exports, potentially including server-local files referenced by the malicious `DICOMDIR` in the exported result. **Recommendations** Update to pydicom version 3.0.2 or later.

**Name of the Vulnerable Software and Affected Versions** text-generation-webui versions through 3.13 **Description** text-generation-webui is a web interface for running Large Language Models. A Local File Inclusion issue exists in the character picture upload feature. An attacker can upload a text file containing a symbolic link to an arbitrary file path. The application follows the symbolic link and serves the contents of the targeted file through the web interface. This allows an unauthenticated attacker to read sensitive files on the server, potentially exposing system configurations and credentials. **Recommendations** Update to version 3.14 or later.