https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:31:54.281928+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-jm92402 CLEANSTART-2026-JM92402 — Security fix for CVE-2024-7774 applied in: n8n 2.28.0-r2 2026-10-03T03:31:54.351521+00:00

Affected: CleanStart: n8n

Security vulnerability affects the n8n package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-198303 EUVD-2026-198303 2026-10-03T03:31:54.351574+00:00 EUVD-2026-198303 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7774 fkie_cve-2024-7774 2026-10-03T03:31:54.351591+00:00

A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.

 https://cve.radiocsirt.org/vuln/ghsa-hc5w-c9f8-9cc4 GHSA-hc5w-c9f8-9cc4 — Langchain Path Traversal vulnerability 2026-10-03T03:31:54.351615+00:00

Affected: npm: langchain

A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.

 https://cve.radiocsirt.org/vuln/pysec-2024-111 Withdrawn: PYSEC-2024-111 2026-10-03T03:31:54.351636+00:00

Withdrawn by the publisher.

Affected: PyPI: langchain

A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.