https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:57:27.767306+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-184276 EUVD-2026-184276 2026-10-04T03:57:27.777250+00:00 EUVD-2026-184276 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4136 fkie_cve-2013-4136 2026-10-04T03:57:27.777283+00:00

ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.

 https://cve.radiocsirt.org/vuln/ghsa-w6rc-q387-vpgq GHSA-w6rc-q387-vpgq — insecure temporary directory usage in passenger 2026-10-04T03:57:27.777314+00:00

Affected: RubyGems: passenger

ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.

 https://cve.radiocsirt.org/vuln/gsd-2013-4136 gsd-2013-4136 2026-10-04T03:57:27.777338+00:00 gsd-2013-4136 https://cve.radiocsirt.org/vuln/rhsa-2013:1136 RHSA-2013:1136 — Red Hat Security Advisory: rubygem-passenger security update 2026-10-04T03:57:27.777350+00:00

rubygem-passenger: incorrect temporary file usage rubygem-passenger: insecure temporary directory usage due to reuse of existing server instance directories

 https://cve.radiocsirt.org/vuln/suse-su-2016:0042-1 SUSE-SU-2016:0042-1 — Security update for rubygem-passenger 2026-10-04T03:57:27.777368+00:00

Security update for rubygem-passenger

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4136 Withdrawn: UBUNTU-CVE-2013-4136 2026-10-04T03:57:27.777384+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: ruby-passenger

ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.