https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T06:43:27.223951+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-107935 BELL-CVE-2026-107935 2026-10-28T06:43:27.227227+00:00

Affected: Alpaquita:stream: podman

 https://cve.radiocsirt.org/vuln/euvd-2026-384996 EUVD-2026-384996 2026-10-28T06:43:27.227271+00:00 EUVD-2026-384996 https://cve.radiocsirt.org/vuln/fkie_cve-2026-107935 fkie_cve-2026-107935 2026-10-28T06:43:27.227286+00:00

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.

 https://cve.radiocsirt.org/vuln/ghsa-hp8g-9vjx-j62m GHSA-hp8g-9vjx-j62m 2026-10-28T06:43:27.227311+00:00

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-107935 UBUNTU-CVE-2026-107935 2026-10-28T06:43:27.227327+00:00

Affected: Ubuntu:24.04:LTS: golang-github-containers-gvisor-tap-vsocks, Ubuntu:26.10: golang-github-containers-gvisor-tap-vsocks, Ubuntu:26.04:LTS: golang-github-containers-gvisor-tap-vsocks

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.