PT-2025-29568 · Unknown · Beiyuouo Arxiv-Daily

Amooryx · Published 2025-07-15 · Updated 2025-07-15 · CVE-2025-50819

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions beiyuouo arxiv-daily versions through 2025-05-06 (commit fad168770b0e68aef3e5acfa16bb2e7a7765d687)

Description A directory traversal vulnerability exists when parsing the topic.yml file in the generation logic within daily arxiv.py.

Recommendations Update beiyuouo arxiv-daily to a version beyond 2025-05-06 (commit fad168770b0e68aef3e5acfa16bb2e7a7765d687).

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-50819

Affected Products

Beiyuouo Arxiv-Daily

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-50819 · Security Note
• https://github.com/beiyuouo/arxiv-daily · Note
• https://t.me/cvetracker/27872 · Telegram Post
• https://twitter.com/CVEnew/status/1945145637156348331 · Twitter Post
• https://github.com/amooryx/arxiv-daily/security/advisories/GHSA-xqg6-5wfv-4855 · Note