https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T01:46:50.232468+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-172258 EUVD-2026-172258 2026-10-24T01:46:50.293291+00:00 EUVD-2026-172258 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7666 fkie_cve-2020-7666 2026-10-24T01:46:50.293327+00:00

This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.

 https://cve.radiocsirt.org/vuln/ghsa-mq35-x99r-54fc GHSA-mq35-x99r-54fc — github.com/u-root/u-root/pkg/cpio Arbitrary File Write via Archive Extraction (Zip Slip) 2026-10-24T01:46:50.293359+00:00

Affected: Go: github.com/u-root/u-root/pkg/cpio

This affects all versions of package github.com/u-root/u-root/pkg/cpio up to and including 7.0.0. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.

 https://cve.radiocsirt.org/vuln/gsd-2020-7666 gsd-2020-7666 2026-10-24T01:46:50.293383+00:00 gsd-2020-7666