https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:09:52.761116+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-02220 bdu:2021-02220 2026-10-03T15:09:53.217583+00:00 bdu:2021-02220 https://cve.radiocsirt.org/vuln/certfr-2021-avi-474 certfr-2021-avi-474 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T15:09:53.217638+00:00 certfr-2021-avi-474 https://cve.radiocsirt.org/vuln/cnvd-2021-30583 cnvd-2021-30583 2026-10-03T15:09:53.217658+00:00 cnvd-2021-30583 https://cve.radiocsirt.org/vuln/euvd-2026-26327 EUVD-2026-26327 2026-10-03T15:09:53.217671+00:00 EUVD-2026-26327 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29425 fkie_cve-2021-29425 2026-10-03T15:09:53.217681+00:00

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.

 https://cve.radiocsirt.org/vuln/ghsa-gwrp-pvrq-jmwv GHSA-gwrp-pvrq-jmwv — Path Traversal and Improper Input Validation in Apache Commons IO 2026-10-03T15:09:53.217711+00:00

Affected: Maven: commons-io:commons-io, Maven: com.cosium.vet:vet, Maven: com.diamondq.common:common-thirdparty.jcasbin, Maven: com.liferay:com.liferay.sass.compiler.jsass, Maven: com.virjar:ratel-api, Maven: net.hasor:cobble-lang, Maven: org.apache.commons:commons-io, Maven: org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-io, Maven: org.checkerframework.annotatedlib:commons-io, Maven: org.smartboot.servlet:servlet-core

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.

 https://cve.radiocsirt.org/vuln/gsd-2021-29425 gsd-2021-29425 2026-10-03T15:09:53.217753+00:00 gsd-2021-29425 https://cve.radiocsirt.org/vuln/oesa-2021-1182 OESA-2021-1182 — apache-commons-io security update 2026-10-03T15:09:53.217766+00:00

Affected: openEuler:20.03-LTS-SP1: apache-commons-io

Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

Security Fix(es):

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like //../foo , or .. foo , the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus limited path traversal), if the calling code would use the result to construct a path value.(CVE-2021-29425)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0605-1 openSUSE-SU-2021:0605-1 — Security update for apache-commons-io 2026-10-03T15:09:53.217791+00:00

Security update for apache-commons-io

 https://cve.radiocsirt.org/vuln/rhsa-2021:2465 RHSA-2021:2465 — Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 4.1.0 security update 2026-10-03T15:09:53.217809+00:00

netty: Request smuggling via content-length header apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6

 https://cve.radiocsirt.org/vuln/suse-su-2021:1282-1 SUSE-SU-2021:1282-1 — Security update for apache-commons-io 2026-10-03T15:09:53.217827+00:00

Security update for apache-commons-io

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-29425 UBUNTU-CVE-2021-29425 2026-10-03T15:09:53.217841+00:00

Affected: Ubuntu:Pro:14.04:LTS: commons-io, Ubuntu:Pro:16.04:LTS: commons-io, Ubuntu:18.04:LTS: commons-io, Ubuntu:20.04:LTS: commons-io

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0119 WID-SEC-W-2023-0119 — Oracle Utilities Applications: Mehrere Schwachstellen 2026-10-03T15:09:53.217865+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Utilities Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.