https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:05:31.494661+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-102774 EUVD-2026-102774 2026-10-02T20:05:31.523070+00:00 EUVD-2026-102774 https://cve.radiocsirt.org/vuln/fkie_cve-2014-7819 fkie_cve-2014-7819 2026-10-02T20:05:31.523108+00:00

Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9.x before 2.9.4, 2.10.x before 2.10.2, 2.11.x before 2.11.3, 2.12.x before 2.12.3, and 3.x before 3.0.0.beta.3, as distributed with Ruby on Rails 3.x and 4.x, allow remote attackers to determine the existence of files outside the application root via a ../ (dot dot slash) sequence with (1) double slashes or (2) URL encoding.

 https://cve.radiocsirt.org/vuln/ghsa-33pp-3763-mrfp GHSA-33pp-3763-mrfp — sprockets vulnerable to Path Traversal 2026-10-02T20:05:31.523144+00:00

Affected: RubyGems: sprockets

Multiple directory traversal vulnerabilities in `server.rb` in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9.x before 2.9.4, 2.10.x before 2.10.2, 2.11.x before 2.11.3, 2.12.x before 2.12.3, and 3.x before 3.0.0.beta.3, as distributed with Ruby on Rails 3.x and 4.x, allow remote attackers to determine the existence of files outside the application root via a ../ (dot dot slash) sequence with (1) double slashes or (2) URL encoding.

 https://cve.radiocsirt.org/vuln/gsd-2014-7819 gsd-2014-7819 2026-10-02T20:05:31.523180+00:00 gsd-2014-7819 https://cve.radiocsirt.org/vuln/rhba-2015:1100 RHBA-2015:1100 — Red Hat Bug Fix Advisory: CFME 5.4.0 bug fixes, and enhancement update 2026-10-02T20:05:31.523193+00:00

rubygem-actionmailer: email address processing DoS rubygem-i18n: cross-site scripting flaw in exception handling rubygem-sprockets: arbitrary file existence disclosure rubygem-rest-client: session fixation vulnerability Set-Cookie headers present in an HTTP 30x redirection responses rubygem-rest-client: unsanitized application logging

 https://cve.radiocsirt.org/vuln/suse-su-2015:0787-1 SUSE-SU-2015:0787-1 — Security update for rubygem-sprockets-2_11 2026-10-02T20:05:31.523235+00:00

Security update for rubygem-sprockets-2_11

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-7819 Withdrawn: UBUNTU-CVE-2014-7819 2026-10-02T20:05:31.523251+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: ruby-sprockets

Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9.x before 2.9.4, 2.10.x before 2.10.2, 2.11.x before 2.11.3, 2.12.x before 2.12.3, and 3.x before 3.0.0.beta.3, as distributed with Ruby on Rails 3.x and 4.x, allow remote attackers to determine the existence of files outside the application root via a ../ (dot dot slash) sequence with (1) double slashes or (2) URL encoding.