https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:05:33.598864+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-23757 cnvd-2018-23757 2026-10-04T16:05:33.603635+00:00 cnvd-2018-23757 https://cve.radiocsirt.org/vuln/euvd-2026-185646 EUVD-2026-185646 2026-10-04T16:05:33.603677+00:00 EUVD-2026-185646 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12615 fkie_cve-2018-12615 2026-10-04T16:05:33.603693+00:00

An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. The set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actually being set while lowering privileges.

 https://cve.radiocsirt.org/vuln/ghsa-4284-jfhc-f854 GHSA-4284-jfhc-f854 — Phusion Passenger incorrect permission assignment 2026-10-04T16:05:33.603725+00:00

Affected: RubyGems: passenger

An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. The set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actually being set while lowering privileges.

 https://cve.radiocsirt.org/vuln/gsd-2018-12615 gsd-2018-12615 2026-10-04T16:05:33.603749+00:00 gsd-2018-12615