https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:41:14.760006+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-243134 EUVD-2026-243134 2026-10-08T21:41:14.838204+00:00 EUVD-2026-243134 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49466 fkie_cve-2025-49466 2026-10-08T21:41:14.838243+00:00

aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,

 https://cve.radiocsirt.org/vuln/ghsa-2f2j-p95m-cpgc GHSA-2f2j-p95m-cpgc 2026-10-08T21:41:14.838276+00:00

aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-49466 UBUNTU-CVE-2025-49466 2026-10-08T21:41:14.838292+00:00

Affected: Ubuntu:Pro:22.04:LTS: aerc, Ubuntu:24.04:LTS: aerc, Ubuntu:25.10: aerc, Ubuntu:Pro:26.04:LTS: aerc

aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,