https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:26:45.947897+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-141928 EUVD-2026-141928 2026-10-03T02:26:45.968021+00:00 EUVD-2026-141928 https://cve.radiocsirt.org/vuln/fkie_cve-2006-3695 fkie_cve-2006-3695 2026-10-03T02:26:45.968056+00:00

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.

 https://cve.radiocsirt.org/vuln/ghsa-r524-c2gf-5chr GHSA-r524-c2gf-5chr — Trac reStructuredText breach of privacy and denial of service vulnerability 2026-10-03T02:26:45.968089+00:00

Affected: PyPI: trac

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.

 https://cve.radiocsirt.org/vuln/gsd-2006-3695 gsd-2006-3695 2026-10-03T02:26:45.968115+00:00 gsd-2006-3695 https://cve.radiocsirt.org/vuln/pysec-2006-2 PYSEC-2006-2 2026-10-03T02:26:45.968128+00:00

Affected: PyPI: trac

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.