https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T17:18:52.334703+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:0855 ALSA-2023:0855 — Moderate: pcs security update 2026-10-08T17:18:52.617996+00:00

Affected: AlmaLinux:8: pcs, AlmaLinux:8: pcs-snmp

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

* sinatra: Reflected File Download attack (CVE-2022-45442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-01888 bdu:2024-01888 2026-10-08T17:18:52.618061+00:00 bdu:2024-01888 https://cve.radiocsirt.org/vuln/euvd-2026-258814 EUVD-2026-258814 2026-10-08T17:18:52.618080+00:00 EUVD-2026-258814 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45442 fkie_cve-2022-45442 2026-10-08T17:18:52.618092+00:00

Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-2x8x-jmrp-phxw GHSA-2x8x-jmrp-phxw — Sinatra vulnerable to Reflected File Download attack 2026-10-08T17:18:52.618115+00:00

Affected: RubyGems: sinatra

### Description An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input.

### References * https://www.blackhat.com/docs/eu-14/materials/eu-14-Hafif-Reflected-File-Download-A-New-Web-Attack-Vector.pdf * https://github.com/advisories/GHSA-8x94-hmjh-97hq

 https://cve.radiocsirt.org/vuln/gsd-2022-45442 gsd-2022-45442 2026-10-08T17:18:52.618139+00:00 gsd-2022-45442 https://cve.radiocsirt.org/vuln/oesa-2024-2474 OESA-2024-2474 — rubygem-sinatra security update 2026-10-08T17:18:52.618150+00:00

Affected: openEuler:22.03-LTS-SP1: rubygem-sinatra

Sinatra is a DSL intended for quickly creating web-applications in Ruby with minimal effort. Security Fix(es): Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.(CVE-2022-45442)

 https://cve.radiocsirt.org/vuln/rhsa-2023:0393 RHSA-2023:0393 — Red Hat Security Advisory: pcs security update 2026-10-08T17:18:52.618171+00:00

sinatra: Reflected File Download attack

 https://cve.radiocsirt.org/vuln/rhsa-2023:0855 RHSA-2023:0855 — Red Hat Security Advisory: pcs security update 2026-10-08T17:18:52.618187+00:00

sinatra: Reflected File Download attack

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45442 UBUNTU-CVE-2022-45442 2026-10-08T17:18:52.618203+00:00

Affected: Ubuntu:Pro:16.04:LTS: ruby-sinatra, Ubuntu:Pro:18.04:LTS: ruby-sinatra, Ubuntu:22.04:LTS: ruby-sinatra

Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0186 WID-SEC-W-2023-0186 — Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-10-08T17:18:52.618224+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.