https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:41:31.166885+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-134022 EUVD-2026-134022 2026-10-09T12:41:31.170474+00:00 EUVD-2026-134022 https://cve.radiocsirt.org/vuln/fkie_cve-2007-2027 fkie_cve-2007-2027 2026-10-09T12:41:31.170508+00:00

Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a "../po" directory, which can be leveraged to conduct format string attacks.

 https://cve.radiocsirt.org/vuln/ghsa-4f5h-wcj8-92w2 GHSA-4f5h-wcj8-92w2 2026-10-09T12:41:31.170540+00:00

Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a "../po" directory, which can be leveraged to conduct format string attacks.

 https://cve.radiocsirt.org/vuln/gsd-2007-2027 gsd-2007-2027 2026-10-09T12:41:31.170558+00:00 gsd-2007-2027 https://cve.radiocsirt.org/vuln/rhsa-2009:1471 RHSA-2009:1471 — Red Hat Security Advisory: elinks security update 2026-10-09T12:41:31.170578+00:00

elinks tries to load .po files from a non-absolute path elinks: entity_cache static array buffer overflow (off-by-one)