https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T09:36:54.257975+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-02343 cnvd-2018-02343 2026-10-15T09:36:54.340462+00:00 cnvd-2018-02343 https://cve.radiocsirt.org/vuln/euvd-2026-164843 EUVD-2026-164843 2026-10-15T09:36:54.340508+00:00 EUVD-2026-164843 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000420 fkie_cve-2017-1000420 2026-10-15T09:36:54.340556+00:00

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite

 https://cve.radiocsirt.org/vuln/ghsa-28xp-g7f6-7mhf GHSA-28xp-g7f6-7mhf — Syncthing vulnerable to symlink traversal and arbitrary file overwrite 2026-10-15T09:36:54.340585+00:00

Affected: Go: github.com/syncthing/syncthing

Syncthing version 0.14.33 and older erronously versions symlinks when they are deleted. If a directory is then created with the same name, a file created in that directory, and the file deleted, it is moved into the symlink target. This can lead to symlink traversal resulting in arbitrary file overwrite.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000420 gsd-2017-1000420 2026-10-15T09:36:54.340609+00:00 gsd-2017-1000420 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-1000420 Withdrawn: UBUNTU-CVE-2017-1000420 2026-10-15T09:36:54.340620+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: syncthing

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite