https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T06:53:28.883526+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-35423 cnvd-2017-35423 2026-10-23T06:53:28.950341+00:00 cnvd-2017-35423 https://cve.radiocsirt.org/vuln/euvd-2026-80747 EUVD-2026-80747 2026-10-23T06:53:28.950377+00:00 EUVD-2026-80747 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000052 fkie_cve-2017-1000052 2026-10-23T06:53:28.950392+00:00

Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass filetype restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-2q6v-32mr-8p8x GHSA-2q6v-32mr-8p8x — Null Byte Injection in Plug.Static 2026-10-23T06:53:28.950420+00:00

Affected: Hex: plug

Plug.Static is used for serving static assets, and is vulnerable to null byte injection. If file upload functionality is provided, this can allow users to bypass filetype restrictions. We recommend all applications that provide file upload functionality and serve those uploaded files locally with Plug.Static to upgrade immediately or include the fix below. If uploaded files are rather stored and served from S3 or any other cloud storage, you are not affected.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000052 gsd-2017-1000052 2026-10-23T06:53:28.950448+00:00 gsd-2017-1000052