https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:25:21.347997+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:5081 ALSA-2023:5081 — Moderate: librsvg2 security update 2026-10-09T20:25:21.359128+00:00

Affected: AlmaLinux:9: librsvg2, AlmaLinux:9: librsvg2-devel, AlmaLinux:9: librsvg2-tools

The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library.

Security Fix(es):

* librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-05427 bdu:2023-05427 2026-10-09T20:25:21.359188+00:00 bdu:2023-05427 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-09T20:25:21.359205+00:00 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-8982 EUVD-2026-8982 2026-10-09T20:25:21.359249+00:00 EUVD-2026-8982 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38633 fkie_cve-2023-38633 2026-10-09T20:25:21.359269+00:00

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

 https://cve.radiocsirt.org/vuln/ghsa-jf6v-gw88-w63q GHSA-jf6v-gw88-w63q 2026-10-09T20:25:21.359318+00:00

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

 https://cve.radiocsirt.org/vuln/gsd-2023-38633 gsd-2023-38633 2026-10-09T20:25:21.359337+00:00 gsd-2023-38633 https://cve.radiocsirt.org/vuln/oesa-2023-1582 OESA-2023-1582 — librsvg2 security update 2026-10-09T20:25:21.359349+00:00

Affected: openEuler:20.03-LTS-SP1: librsvg2, openEuler:20.03-LTS-SP3: librsvg2, openEuler:22.03-LTS: librsvg2, openEuler:22.03-LTS-SP1: librsvg2, openEuler:22.03-LTS-SP2: librsvg2

An SVG library based on cairo. Security Fix(es): A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.(CVE-2023-38633)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13500-1 openSUSE-SU-2024:13500-1 — gdk-pixbuf-loader-rsvg-2.57.0-4.1 on GA media 2026-10-09T20:25:21.359378+00:00

gdk-pixbuf-loader-rsvg-2.57.0-4.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:4809 RHSA-2023:4809 — Red Hat Security Advisory: librsvg2 security update 2026-10-09T20:25:21.359395+00:00

librsvg: Arbitrary file read when xinclude href has special characters

 https://cve.radiocsirt.org/vuln/suse-su-2023:3208-1 SUSE-SU-2023:3208-1 — Security update for librsvg 2026-10-09T20:25:21.359411+00:00

Security update for librsvg

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-38633 UBUNTU-CVE-2023-38633 2026-10-09T20:25:21.359424+00:00

Affected: Ubuntu:20.04:LTS: librsvg, Ubuntu:22.04:LTS: librsvg

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1859 WID-SEC-W-2023-1859 — librsvg: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-09T20:25:21.359444+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in librsvg ausnutzen, um Informationen offenzulegen.