File and Path Handling

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Path traversal vulnerability in Simple Archive Format package import in DSpaceCVE-2022-31195DSpace · CVSS 7.2 · 2.0% likely

   CWE-22

2. Path traversal vulnerabilities in DSpace JSPUI submission uploadCVE-2022-31194DSpace · CVSS 8.2 · 1.5% likely

   CWE-22

3. DSpace: Curation Task Reporter output path is not restricted to trusted directories (Path Traversal Vulnerability)CVE-2026-49831DSpace · CVSS 5.5 · 0.5% likely

   CWE-22

4. DSpace has path traversal vulnerability in Simple Archive Format (SAF) package import via contents fileCVE-2025-53622DSpace · CVSS 5.2 · 0.5% likely

   CWE-22

5. DSpace: Path Traversal possible in LDN message generationCVE-2026-49833DSpace · CVSS 5.5 · 0.4% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.