CVE-2022-31573: ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

July 12, 2022 (updated October 27, 2026)

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

References

github.com/advisories/GHSA-687h-86vc-5x59
github.com/github/securitylab/issues/669
github.com/pypa/advisory-database/tree/main/vulns/chainerrl-visualizer/PYSEC-2026-309.yaml
nvd.nist.gov/vuln/detail/CVE-2022-31573
pypi.org/project/chainerrl-visualizer

Code Behaviors & Features

Detect and mitigate CVE-2022-31573 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →