leon vulnerabilities

CVEs whose affected-version data names the leon package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116073Medium· 6.5

yesterday

Leon before commit 50df142 Path Traversal via /download model Command

Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to write files outside the models directory via percent-encoded separators. Attackers can trick a user into running '/d…

▾ Sunlitleon-ai · leonvia CVEORG