https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:28:40.498919+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-travis-cve-2013-0262 BREW-travis-CVE-2013-0262 — Rack Vulnerable to Path Traversal 2026-10-03T06:28:40.513179+00:00

Affected: Homebrew: travis

`rack/file.rb` (`Rack::File`) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted `PATH_INFO` environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."

 https://cve.radiocsirt.org/vuln/euvd-2026-104580 EUVD-2026-104580 2026-10-03T06:28:40.513238+00:00 EUVD-2026-104580 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0262 fkie_cve-2013-0262 2026-10-03T06:28:40.513254+00:00

rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."

 https://cve.radiocsirt.org/vuln/ghsa-85r7-w5mv-c849 GHSA-85r7-w5mv-c849 — Rack Vulnerable to Path Traversal 2026-10-03T06:28:40.513278+00:00

Affected: RubyGems: rack

`rack/file.rb` (`Rack::File`) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted `PATH_INFO` environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."

 https://cve.radiocsirt.org/vuln/gsd-2013-0262 gsd-2013-0262 2026-10-03T06:28:40.513299+00:00 gsd-2013-0262 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10115-1 openSUSE-SU-2024:10115-1 — ruby2.2-rubygem-rack-1_4-1.4.7-1.8 on GA media 2026-10-03T06:28:40.513311+00:00

ruby2.2-rubygem-rack-1_4-1.4.7-1.8 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2013:0638 RHSA-2013:0638 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1.2 update 2026-10-03T06:28:40.513328+00:00

rubygem-rack: Path sanitization information disclosure rubygem-rack: Timing attack in cookie sessions jenkins: cross-site request forgery (CSRF) on Jenkins master jenkins: XSS jenkins: cross-site request forgery (CSRF) protection mechanism bypass jenkins: cause building jobs without direct access jenkins: denial of service attack by feeding a carefully crafted payload to Jenkins

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0262 UBUNTU-CVE-2013-0262 2026-10-03T06:28:40.513349+00:00

Affected: Ubuntu:14.04:LTS: ruby-rack

rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."