yi-ge vulnerabilities

Products

• get-header-ip 1
• github.com/yi-ge/unzip 1

Latest yi-ge CVEs

Newest publication first

1. CVE-2025-10944 yi-ge get-header-ip ip.php cross site scripting

   Published 2025-09-25

   Medium·CVSS 5.1 EPSS 0.26%

   A weakness has been identified in yi-ge get-header-ip up to 589b23d0eb0043c310a6a13ce4bbe2505d0d0b15. This issue affects the function ip of the file ip.php. This manipulation of the argument callback causes cross site scripting. The attack may be initiated remotely. This product...

2. CVE-2020-36561 Path traversal in github.com/yi-ge/unzip

   Published 2022-12-27

   Critical·CVSS 9.1 EPSS 1.4%

   Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.