CVE-2024-42054: Cervantessec Cervantes

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Cervantes through 0.5-alpha accepts insecure file uploads.

Affected products

• Cervantessec Cervantes: version 0.3 only; version 0.4 only; version 0.5 only

Published 2024-07-28. Last modified 2026-06-17.