| Mobile Security Framework (MobSF) vulnerable to SSRF in firebase database checkCVE-2024-31215 · GHSA-WPFF-WM84-X5CXVersion ranges need review. |
mobsf |
PyPI |
Medium
|
Fix reported |
|
| MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP UploadsCVE-2026-68922 · GHSA-8J49-MMCX-4MP5Version ranges need review. |
mobsf |
PyPI |
Medium
|
Fix reported |
|
| MobSF has SSRF port restriction bypass in assetlinks_checkCVE-2026-68927 · GHSA-95PX-34X5-P37HVersion ranges need review. |
mobsf |
PyPI |
Low
|
Fix reported |
|
| MobSF's CSRF checks not enforced after Django migrationCVE-2026-68923 · GHSA-3P54-567P-2WPRVersion ranges need review. |
mobsf |
PyPI |
Medium
|
Fix reported |
|
| MobSF Vulnerable to Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK ExtractionCVE-2026-68924 · GHSA-X768-8642-MMQ9Version ranges need review. |
mobsf |
PyPI |
Medium
|
Fix reported |
|
| MobSF has SQL Injection in its SQLite Database Viewer UtilsCVE-2026-33545 · GHSA-HQJR-43R5-9Q58Version ranges need review. |
mobsf |
PyPI |
Medium
|
Fix reported |
|
| MobSF Partial Denial of Service (DoS)CVE-2025-24804 · GHSA-JRM8-XGF3-FWQRVersion ranges need review. |
mobsf |
PyPI |
High
|
Fix reported |
|
| Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon UploadCVE-2025-46335 · GHSA-MWFG-948F-2CC5Version ranges need review. |
mobsf |
PyPI |
Medium
|
Fix reported |
|
| MobSF has Stored XSS via Manifest Analysis - Dialer Code Host FieldCVE-2026-24490 · GHSA-8HF7-H89P-3PQJVersion ranges need review. |
mobsf |
PyPI |
High
|
Fix reported |
|
| SSRF Vulnerability on assetlinks_check(act_name, well_knowns)CVE-2024-29190 · GHSA-WFGJ-WRGH-H3R3Version ranges need review. |
mobsfmobsfscan |
PyPI |
High
|
Fix reported |
|
| Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death AttackCVE-2025-46730 · GHSA-C5VG-26P8-Q8CRVersion ranges need review. |
mobsf |
PyPI |
Medium
|
No fix reported |
|
| Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library FilesCVE-2024-43399 · GHSA-4HH3-VJ32-GR6JVersion ranges need review. |
mobsf |
PyPI |
High
|
Fix reported |
|
| MobSF Path Traversal in GET /download/<filename> using absolute filenamesCVE-2025-58161 · GHSA-CCC3-FVFX-MW3VVersion ranges need review. |
mobsf |
PyPI |
Low
|
Fix reported |
|
| MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a ExtractionCVE-2025-58162 · GHSA-9GH8-9R95-3FC3Version ranges need review. |
mobsf |
PyPI |
Medium
|
Fix reported |
|
| Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" FunctionalityCVE-2024-53999 · GHSA-5JC6-H9W7-JM3PVersion ranges need review. |
mobsf |
PyPI |
Medium
|
Fix reported |
|
| MobSF Stored Cross-Site Scripting (XSS)CVE-2025-24803 · GHSA-CXQQ-W3X5-7PH3Version ranges need review. |
mobsf |
PyPI |
High
|
Fix reported |
|
| MobSF vulnerable to Open Redirect in Login RedirectCVE-2024-41955 · GHSA-8M9J-2F32-2VX4Version ranges need review. |
mobsf |
PyPI |
Medium
|
Fix reported |
|
| MobSF Local Privilege EscalationCVE-2025-24805 · GHSA-79F6-P65J-3M2MVersion ranges need review. |
mobsf |
PyPI |
High
|
Fix reported |
|
| MobSF allows attackers to read arbitrary files via a crafted HTTP requestCVE-2022-41547 · GHSA-F42P-VC8P-7X54Version ranges need review. |
mobsf |
PyPI |
High
|
Fix reported |
|
| Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS RebindingCVE-2025-31116 · GHSA-FCFQ-M8P6-GW56Version ranges need review. |
mobsf |
PyPI |
Medium
|
Fix reported |
|
