https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:13:32.048197+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-67210 EUVD-2026-67210 2026-10-02T17:13:32.069541+00:00 EUVD-2026-67210 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14672 fkie_cve-2018-14672 2026-10-02T17:13:32.069579+00:00

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages.

 https://cve.radiocsirt.org/vuln/ghsa-2v23-4x7f-rh2c GHSA-2v23-4x7f-rh2c 2026-10-02T17:13:32.069612+00:00

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages.

 https://cve.radiocsirt.org/vuln/gsd-2018-14672 gsd-2018-14672 2026-10-02T17:13:32.069628+00:00 gsd-2018-14672 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14672 Withdrawn: UBUNTU-CVE-2018-14672 2026-10-02T17:13:32.069639+00:00

Withdrawn by the publisher.

Affected: Ubuntu:20.04:LTS: clickhouse

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages.