https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:29:24.643007+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-00440 bdu:2019-00440 2026-10-03T06:29:24.658128+00:00 bdu:2019-00440 https://cve.radiocsirt.org/vuln/certfr-2018-avi-297 certfr-2018-avi-297 — Une vulnérabilité a été découverte dans Ruby On Rails. Elle permet à un attaquant de provoquer une atteinte à la confid… 2026-10-03T06:29:24.658161+00:00 certfr-2018-avi-297 https://cve.radiocsirt.org/vuln/euvd-2026-168347 EUVD-2026-168347 2026-10-03T06:29:24.658179+00:00 EUVD-2026-168347 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3760 fkie_cve-2018-3760 2026-10-03T06:29:24.658190+00:00

There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately.

 https://cve.radiocsirt.org/vuln/ghsa-pr3h-jjhj-573x GHSA-pr3h-jjhj-573x — Sprockets path traversal leads to information leak 2026-10-03T06:29:24.658218+00:00

Affected: RubyGems: sprockets

Specially crafted requests can be used to access files that exist on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately. ### Workaround: In Rails applications, work around this issue, set `config.assets.compile = false` and `config.public_file_server.enabled = true` in an initializer and precompile the assets.

This work around will not be possible in all hosting environments and upgrading is advised.

 https://cve.radiocsirt.org/vuln/gsd-2018-3760 gsd-2018-3760 2026-10-03T06:29:24.658246+00:00 gsd-2018-3760 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11354-1 openSUSE-SU-2024:11354-1 — ruby2.7-rubygem-sprockets-4.0.2-1.7 on GA media 2026-10-03T06:29:24.658257+00:00

ruby2.7-rubygem-sprockets-4.0.2-1.7 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2018:2244 RHSA-2018:2244 — Red Hat Security Advisory: rh-ror42-rubygem-sprockets security update 2026-10-03T06:29:24.658274+00:00

rubygem-sprockets: Path traversal in forbidden_request?() can allow remote attackers to read arbitrary files

 https://cve.radiocsirt.org/vuln/suse-su-2018:1994-1 SUSE-SU-2018:1994-1 — Security update for rubygem-sprockets 2026-10-03T06:29:24.658289+00:00

Security update for rubygem-sprockets

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-3760 UBUNTU-CVE-2018-3760 2026-10-03T06:29:24.658303+00:00

Affected: Ubuntu:16.04:LTS: ruby-sprockets, Ubuntu:18.04:LTS: ruby-sprockets

There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1086 WID-SEC-W-2025-1086 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T06:29:24.658324+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.