https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:29:29.588273+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-242641 EUVD-2026-242641 2026-10-03T22:29:29.690771+00:00 EUVD-2026-242641 https://cve.radiocsirt.org/vuln/fkie_cve-2024-22194 fkie_cve-2024-22194 2026-10-03T22:29:29.690810+00:00

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and in `case-utils` in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`.

 https://cve.radiocsirt.org/vuln/ghsa-rgrf-6mf5-m882 GHSA-rgrf-6mf5-m882 — cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstratio… 2026-10-03T22:29:29.690845+00:00

Affected: PyPI: cdo-local-uuid, PyPI: case-utils

### Impact _What kind of vulnerability is it? Who is impacted?_

An information leakage vulnerability is present in [`cdo-local-uuid`](https://pypi.org/project/cdo-local-uuid/) at version `0.4.0`, and in [`case-utils`](https://pypi.org/project/case-utils/) in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`.

The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`. Henceforth, both will be called `local_uuid()`.

`local_uuid()` generates UUIDv5s using a deterministic pseudorandom number stream. This was written to make graph application demonstrations generate consistent, version-controllable output with minimal noise caused by demonstration re-runs. Part of the information used to keep individual examples' generated output distinct from one another is seed information from the caller's environment, particularly the program's argument vector. The present working directory is also included as part of the seed information, but for reasons including maintaining user environment privacy, as well as keeping generated identifiers consistent regardless of where a source tree is housed on a user's file system, the present working directory is trimmed from the left to exclude path information outside of a supplied "Top" source directory. (In context of the Make scripting language, this "top" directory is typically in a variable called `top_srcdir`. In context…

 https://cve.radiocsirt.org/vuln/gsd-2024-22194 gsd-2024-22194 2026-10-03T22:29:29.690910+00:00 gsd-2024-22194 https://cve.radiocsirt.org/vuln/pysec-2024-5 PYSEC-2024-5 2026-10-03T22:29:29.690923+00:00

Affected: PyPI: case-utils

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and in `case-utils` in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`.