https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:08:12.550291+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2024-49766 Withdrawn: BELL-CVE-2024-49766 — CVE-2024-49766 does not affect BellSoft software 2026-10-04T01:08:12.571206+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/brew-aws-sam-cli-cve-2024-49766 BREW-aws-sam-cli-CVE-2024-49766 — Werkzeug safe_join not safe on Windows 2026-10-04T01:08:12.571258+00:00

Affected: Homebrew: aws-sam-cli

On Python < 3.11 on Windows, `os.path.isabs()` does not catch UNC paths like `//server/share`. Werkzeug's `safe_join()` relies on this check, and so can produce a path that is not safe, potentially allowing unintended access to data. Applications using Python >= 3.11, or not using Windows, are not vulnerable.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0021 certfr-2025-avi-0021 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T01:08:12.571291+00:00 certfr-2025-avi-0021 https://cve.radiocsirt.org/vuln/cleanstart-2026-az09261 Withdrawn: CLEANSTART-2026-AZ09261 — Security fixes for CVE-2023-46136, CVE-2024-12797, CVE-2024-34069, CVE-2024-49766, CVE-2024-49767, CVE-2025-62727, CVE-… 2026-10-04T01:08:12.571308+00:00

Withdrawn by the publisher.

Affected: CleanStart: airflow-3

Multiple security vulnerabilities affect the airflow-3 package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-212957 EUVD-2026-212957 2026-10-04T01:08:12.571334+00:00 EUVD-2026-212957 https://cve.radiocsirt.org/vuln/fkie_cve-2024-49766 fkie_cve-2024-49766 2026-10-04T01:08:12.571346+00:00

Werkzeug is a Web Server Gateway Interface web application library. On Python < 3.11 on Windows, os.path.isabs() does not catch UNC paths like //server/share. Werkzeug's safe_join() relies on this check, and so can produce a path that is not safe, potentially allowing unintended access to data. Applications using Python >= 3.11, or not using Windows, are not vulnerable. Werkzeug version 3.0.6 contains a patch.

 https://cve.radiocsirt.org/vuln/ghsa-f9vj-2wh5-fj8j GHSA-f9vj-2wh5-fj8j — Werkzeug safe_join not safe on Windows 2026-10-04T01:08:12.571368+00:00

Affected: PyPI: Werkzeug

On Python < 3.11 on Windows, `os.path.isabs()` does not catch UNC paths like `//server/share`. Werkzeug's `safe_join()` relies on this check, and so can produce a path that is not safe, potentially allowing unintended access to data. Applications using Python >= 3.11, or not using Windows, are not vulnerable.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-49766 msrc_CVE-2024-49766 — Werkzeug safe_join not safe on Windows 2026-10-04T01:08:12.571387+00:00 msrc_CVE-2024-49766 https://cve.radiocsirt.org/vuln/pysec-2026-2045 PYSEC-2026-2045 — Werkzeug safe_join not safe on Windows 2026-10-04T01:08:12.571402+00:00

Affected: PyPI: werkzeug

On Python < 3.11 on Windows, `os.path.isabs()` does not catch UNC paths like `//server/share`. Werkzeug's `safe_join()` relies on this check, and so can produce a path that is not safe, potentially allowing unintended access to data. Applications using Python >= 3.11, or not using Windows, are not vulnerable.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-49766 Withdrawn: UBUNTU-CVE-2024-49766 2026-10-04T01:08:12.571419+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: python-werkzeug, Ubuntu:Pro:18.04:LTS: python-werkzeug, Ubuntu:20.04:LTS: python-werkzeug, Ubuntu:22.04:LTS: python-werkzeug, Ubuntu:24.10: python-werkzeug, Ubuntu:24.04:LTS: python-werkzeug

Werkzeug is a Web Server Gateway Interface web application library. On Python < 3.11 on Windows, os.path.isabs() does not catch UNC paths like //server/share. Werkzeug's safe_join() relies on this check, and so can produce a path that is not safe, potentially allowing unintended access to data. Applications using Python >= 3.11, or not using Windows, are not vulnerable. Werkzeug version 3.0.6 contains a patch.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3614 WID-SEC-W-2024-3614 — IBM InfoSphere Information Server: Mehrere Schwachstellen 2026-10-04T01:08:12.571447+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.