pandora-analysis pandora

• CVE-2026-88069 Critical 9.3 Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis 0.5%
• CVE-2026-75531 High 7.0 Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora 0.4%
• CVE-2026-75529 Medium 6.9 Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora 0.4%
• CVE-2026-74767 High 8.7 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb 0.4%
• CVE-2026-74764 Critical 10.0 Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora 0.6%