https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:41:02.926820+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-104514 EUVD-2026-104514 2026-10-03T06:41:03.038696+00:00 EUVD-2026-104514 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0162 fkie_cve-2013-0162 2026-10-03T06:41:03.038754+00:00

The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

 https://cve.radiocsirt.org/vuln/ghsa-8mvw-22r7-w6fq GHSA-8mvw-22r7-w6fq — ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name 2026-10-03T06:41:03.038792+00:00

Affected: RubyGems: ruby_parser

The `diff_pp` function in `lib/gauntlet_rubyparser.rb` in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in `/tmp`.

 https://cve.radiocsirt.org/vuln/gsd-2013-0162 gsd-2013-0162 2026-10-03T06:41:03.038818+00:00 gsd-2013-0162 https://cve.radiocsirt.org/vuln/rhsa-2013:0544 RHSA-2013:0544 — Red Hat Security Advisory: Subscription Asset Manager 1.2 update 2026-10-03T06:41:03.038831+00:00

Katello: /etc/katello/secure/passphrase is world readable Katello: lack of authorization in proxies_controller.rb rubygem-rack: parsing Content-Disposition header DoS rubygem-ruby_parser: incorrect temporary file usage rubygem-rack: receiving excessively long lines triggers out-of-memory error rubygem-rack: Rack::Auth:: AbstractRequest DoS

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0162 UBUNTU-CVE-2013-0162 2026-10-03T06:41:03.038859+00:00

Affected: Ubuntu:16.04:LTS: ruby-parser, Ubuntu:18.04:LTS: ruby-parser, Ubuntu:20.04:LTS: ruby-parser

The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.