https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T08:04:44.516158+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-duplicity-cve-2007-5201 BREW-duplicity-CVE-2007-5201 — FTP backend for Duplicity Discloses Passwords to Process Listing 2026-10-17T08:04:44.519968+00:00

Affected: Homebrew: duplicity

The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.

 https://cve.radiocsirt.org/vuln/euvd-2026-137103 EUVD-2026-137103 2026-10-17T08:04:44.520017+00:00 EUVD-2026-137103 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5201 fkie_cve-2007-5201 2026-10-17T08:04:44.520034+00:00

The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.

 https://cve.radiocsirt.org/vuln/ghsa-wxcw-rqxc-hj85 GHSA-wxcw-rqxc-hj85 — FTP backend for Duplicity Discloses Passwords to Process Listing 2026-10-17T08:04:44.520056+00:00

Affected: PyPI: duplicity

The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.

 https://cve.radiocsirt.org/vuln/gsd-2007-5201 gsd-2007-5201 2026-10-17T08:04:44.520076+00:00 gsd-2007-5201 https://cve.radiocsirt.org/vuln/pysec-2026-633 PYSEC-2026-633 — FTP backend for Duplicity Discloses Passwords to Process Listing 2026-10-17T08:04:44.520088+00:00

Affected: PyPI: duplicity

The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.