cola_dnslog vulnerabilities

CVEs whose affected-version data names the cola_dnslog package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-57403High· 7.5

9mo ago

Cola Dnslog v1.3.2 is vulnerable to Directory Traversal

Cola Dnslog v1.3.2 is vulnerable to Directory Traversal. When a DNS query for a TXT record is processed, the application concatenates the requested URL (or a portion of it) directly with a base path using os.path.join. This bypass allows…

▾ Twilightabelche · cola_dnslogEPSS 1.0%via NVD