https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T10:22:34.819555+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-185690 EUVD-2026-185690 2026-10-28T10:22:34.822189+00:00 EUVD-2026-185690 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10561 fkie_cve-2016-10561 2026-10-28T10:22:34.822226+00:00

Bitty is a development web server tool that functions similar to `python -m SimpleHTTPServer`. Version 0.2.10 has a directory traversal vulnerability that is exploitable via the URL path in GET requests.

 https://cve.radiocsirt.org/vuln/ghsa-f5mh-hq6h-whxv GHSA-f5mh-hq6h-whxv — Directory Traversal in bitty 2026-10-28T10:22:34.822266+00:00

Affected: npm: bitty

Affected versions of `bitty` are vulnerable to directory traversal via the URL path in GET requests.

## Recommendation

The `bitty` package is not currently maintained, and has not seen an update since 2015.

At this time, the best available mitigation is to use an alternative module that is actively maintained and provides similar functionality, such as [serve](https://www.npmjs.com/package/serve).

 https://cve.radiocsirt.org/vuln/gsd-2016-10561 gsd-2016-10561 2026-10-28T10:22:34.822310+00:00 gsd-2016-10561