https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T03:47:51.163059+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-184572 EUVD-2026-184572 2026-10-13T03:47:51.165895+00:00 EUVD-2026-184572 https://cve.radiocsirt.org/vuln/fkie_cve-2005-1632 fkie_cve-2005-1632 2026-10-13T03:47:51.165922+00:00

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.

 https://cve.radiocsirt.org/vuln/ghsa-vxf2-7rc3-pxmx GHSA-vxf2-7rc3-pxmx — Cheetah Path Search Order Hijacking 2026-10-13T03:47:51.165950+00:00

Affected: PyPI: cheetah

Cheetah 0.9.15 and 0.9.16 searches the `/tmp` directory for modules before using the paths in the `PYTHONPATH` variable, which allows local users to execute arbitrary code via a malicious module in `/tmp/`.

 https://cve.radiocsirt.org/vuln/gsd-2005-1632 gsd-2005-1632 2026-10-13T03:47:51.165972+00:00 gsd-2005-1632 https://cve.radiocsirt.org/vuln/pysec-2026-622 PYSEC-2026-622 — Cheetah Path Search Order Hijacking 2026-10-13T03:47:51.165984+00:00

Affected: PyPI: cheetah

Cheetah 0.9.15 and 0.9.16 searches the `/tmp` directory for modules before using the paths in the `PYTHONPATH` variable, which allows local users to execute arbitrary code via a malicious module in `/tmp/`.