https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:35:39.777760+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-249379 EUVD-2026-249379 2026-10-04T12:35:39.874388+00:00 EUVD-2026-249379 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54314 fkie_cve-2025-54314 2026-10-04T12:35:39.874419+00:00

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."

 https://cve.radiocsirt.org/vuln/ghsa-mqcp-p2hv-vw6x Withdrawn: GHSA-mqcp-p2hv-vw6x — Withdrawn Advisory: Thor can construct an unsafe shell command from library input. 2026-10-04T12:35:39.874450+00:00

Withdrawn by the publisher.

Affected: RubyGems: thor

### Withdrawn Advisory This advisory has been withdrawn because the method described can only be used with arguments that are controlled by Thor, and an external attacker cannot access the functionality described in the body of the CVE. This link is maintained to preserve external references.

### Original Description Thor before 1.4.0 can construct an unsafe shell command from library input.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-54314 msrc_CVE-2025-54314 — Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier beca… 2026-10-04T12:35:39.874476+00:00 msrc_CVE-2025-54314 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15382-1 openSUSE-SU-2025:15382-1 — ruby3.4-rubygem-thor-1.4.0-1.1 on GA media 2026-10-04T12:35:39.874493+00:00

ruby3.4-rubygem-thor-1.4.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-54314 UBUNTU-CVE-2025-54314 2026-10-04T12:35:39.874508+00:00

Affected: Ubuntu:14.04:LTS: ruby-thor, Ubuntu:16.04:LTS: ruby-thor, Ubuntu:18.04:LTS: ruby-thor, Ubuntu:20.04:LTS: ruby-thor, Ubuntu:22.04:LTS: ruby-thor, Ubuntu:24.04:LTS: ruby-thor, Ubuntu:25.10: ruby-thor, Ubuntu:26.04:LTS: ruby-thor

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1730 WID-SEC-W-2026-1730 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T12:35:39.874535+00:00

Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.