https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:34:09.420026+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2006-avi-304 certa-2006-avi-304 2026-10-02T10:34:09.463119+00:00 certa-2006-avi-304 https://cve.radiocsirt.org/vuln/euvd-2026-141729 EUVD-2026-141729 2026-10-02T10:34:09.463150+00:00 EUVD-2026-141729 https://cve.radiocsirt.org/vuln/fkie_cve-2006-3458 fkie_cve-2006-3458 2026-10-02T10:34:09.463164+00:00

Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.

 https://cve.radiocsirt.org/vuln/ghsa-jcjp-qqpq-pc54 GHSA-jcjp-qqpq-pc54 — Zope allows local users to read arbitrary files 2026-10-02T10:34:09.463192+00:00

Affected: PyPI: Zope2

Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.

 https://cve.radiocsirt.org/vuln/gsd-2006-3458 gsd-2006-3458 2026-10-02T10:34:09.463230+00:00 gsd-2006-3458 https://cve.radiocsirt.org/vuln/pysec-2006-7 Withdrawn: PYSEC-2006-7 2026-10-02T10:34:09.463243+00:00

Withdrawn by the publisher.

Affected: PyPI: zope2

Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.