https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T10:43:50.423361+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-50234 EUVD-2026-50234 2026-10-20T10:43:50.456956+00:00 EUVD-2026-50234 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5416 fkie_cve-2019-5416 2026-10-20T10:43:50.456991+00:00

A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server.

 https://cve.radiocsirt.org/vuln/ghsa-qwj8-p662-3m7x GHSA-qwj8-p662-3m7x — Path Traversal in localhost-now 2026-10-20T10:43:50.457023+00:00

Affected: npm: localhost-now

All versions of `localhost-now` are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths.

## Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.

 https://cve.radiocsirt.org/vuln/gsd-2019-5416 gsd-2019-5416 2026-10-20T10:43:50.457049+00:00 gsd-2019-5416