https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T22:17:05.874373+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-09600 cnvd-2018-09600 2026-10-17T22:17:05.877327+00:00 cnvd-2018-09600 https://cve.radiocsirt.org/vuln/euvd-2026-180654 EUVD-2026-180654 2026-10-17T22:17:05.877358+00:00 EUVD-2026-180654 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1261 fkie_cve-2018-1261 2026-10-17T22:17:05.877373+00:00

Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.

 https://cve.radiocsirt.org/vuln/ghsa-m9jm-rhrm-gcxj GHSA-m9jm-rhrm-gcxj — Path traversal in org.springframework.integration:spring-integration-zip 2026-10-17T22:17:05.877401+00:00

Affected: Maven: org.springframework.integration:spring-integration-zip

Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.

 https://cve.radiocsirt.org/vuln/gsd-2018-1261 gsd-2018-1261 2026-10-17T22:17:05.877424+00:00 gsd-2018-1261