CVE-2022-30899中 4.8A Cross Site Scripting vulnerabilty exists in PartKeepr 1.4.0 via the 'name' field in /api/part_categories.
CVE-2022-22702中 4.3PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests…
CVE-2022-22701中 6.5PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowin…