https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:09:48.395498+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-173245 EUVD-2026-173245 2026-10-06T14:09:48.400847+00:00 EUVD-2026-173245 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5093 fkie_cve-2013-5093 2026-10-06T14:09:48.400892+00:00

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.

 https://cve.radiocsirt.org/vuln/ghsa-m923-w2gj-v43g GHSA-m923-w2gj-v43g — graphite-web is vulnerable to Remote Code Execution via renderLocalView function 2026-10-06T14:09:48.400931+00:00

Affected: PyPI: graphite-web

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.

 https://cve.radiocsirt.org/vuln/gsd-2013-5093 gsd-2013-5093 2026-10-06T14:09:48.400955+00:00 gsd-2013-5093 https://cve.radiocsirt.org/vuln/pysec-2013-3 PYSEC-2013-3 2026-10-06T14:09:48.400967+00:00

Affected: PyPI: graphite-web

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.