https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:17:02.717173+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-02318 bdu:2023-02318 2026-10-06T12:17:02.721140+00:00 bdu:2023-02318 https://cve.radiocsirt.org/vuln/euvd-2026-228176 EUVD-2026-228176 2026-10-06T12:17:02.721175+00:00 EUVD-2026-228176 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4722 fkie_cve-2022-4722 2026-10-06T12:17:02.721189+00:00

Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.

 https://cve.radiocsirt.org/vuln/ghsa-wf33-6x33-wcf9 GHSA-wf33-6x33-wcf9 — rdiffweb vulnerable to Authentication Bypass by Primary Weakness 2026-10-06T12:17:02.721217+00:00

Affected: PyPI: rdiffweb

In rdiffweb prior to 2.5.5, the username field is not unique to users. This allows exploitation of primary key logic by creating the same name with different combinations & may allow unauthorized access.

 https://cve.radiocsirt.org/vuln/gsd-2022-4722 gsd-2022-4722 2026-10-06T12:17:02.721241+00:00 gsd-2022-4722 https://cve.radiocsirt.org/vuln/pysec-2022-43008 PYSEC-2022-43008 2026-10-06T12:17:02.721253+00:00

Affected: PyPI: rdiffweb

Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.