MEDIUM
DeepPavlov
CVE published 2026-10-13
CVE-2026-109155
A path traversal vulnerability was found in DeepPavlov's model download handler, which could allow remote attackers to manipulate file paths. The issue was reported to the project, but no response has been received yet. The vulnerability affects versions up to 1.7.0 and requires defenders to assess exposure and verify inventory. The CVE record and source item provide limited information about the vulnerab [truncated]