https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:24:29.549459+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-mongo-orchestration-cve-2014-3137 BREW-mongo-orchestration-CVE-2014-3137 — Bottle does not properly limit content-types 2026-10-03T22:24:29.721212+00:00

Affected: Homebrew: mongo-orchestration

Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a `;` (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/euvd-2026-98961 EUVD-2026-98961 2026-10-03T22:24:29.721274+00:00 EUVD-2026-98961 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3137 fkie_cve-2014-3137 2026-10-03T22:24:29.721298+00:00

Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-873q-wpqr-xfgw GHSA-873q-wpqr-xfgw — Bottle does not properly limit content-types 2026-10-03T22:24:29.721325+00:00

Affected: PyPI: bottle

Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a `;` (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/gsd-2014-3137 gsd-2014-3137 2026-10-03T22:24:29.721350+00:00 gsd-2014-3137 https://cve.radiocsirt.org/vuln/pysec-2014-77 PYSEC-2014-77 2026-10-03T22:24:29.721362+00:00

Affected: PyPI: bottle

Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3137 UBUNTU-CVE-2014-3137 2026-10-03T22:24:29.721382+00:00

Affected: Ubuntu:Pro:14.04:LTS: python-bottle

Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.