https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T21:47:13.215124+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-129219 EUVD-2026-129219 2026-10-18T21:47:13.217816+00:00 EUVD-2026-129219 https://cve.radiocsirt.org/vuln/fkie_cve-2008-4129 fkie_cve-2008-4129 2026-10-18T21:47:13.217847+00:00

Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive upload (aka zip upload) functionality.

 https://cve.radiocsirt.org/vuln/ghsa-65hm-pfc7-5f2p GHSA-65hm-pfc7-5f2p 2026-10-18T21:47:13.217877+00:00

Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive upload (aka zip upload) functionality.

 https://cve.radiocsirt.org/vuln/gsd-2008-4129 gsd-2008-4129 2026-10-18T21:47:13.217894+00:00 gsd-2008-4129