openc3-cosmos-tool-iframe 6.5.0

2 security vulnerabilities found in version 6.5.0

OpenC3 COSMOS Vulnerable to Directory Traversal via /script-api/scripts/ endpoint

high severity CVE-2025-28384
high severity CVE-2025-28384
Unaffected versions: < 6.0.0

An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS 6.0.0 allows attackers to execute a directory traversal.

OpenC3 COSMOS Vulnerable to Directory Traversal via openc3-api/tables endpoint

high severity CVE-2025-28382
high severity CVE-2025-28382
Unaffected versions: < 6.0.0

An issue in the openc3-api/tables endpoint of OpenC3 COSMOS 6.0.0 allows attackers to execute a directory traversal.

No officially reported memory leakage issues detected.


This gem version does not have any officially reported memory leaked issues.

No license issues detected.


This gem version has a license in the gemspec.

This gem version is available.


This gem version has not been yanked and is still available for usage.