https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T10:23:25.335899+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-15554 cnvd-2019-15554 2026-10-21T10:23:25.341494+00:00 cnvd-2019-15554 https://cve.radiocsirt.org/vuln/euvd-2026-54945 EUVD-2026-54945 2026-10-21T10:23:25.341530+00:00 EUVD-2026-54945 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12277 fkie_cve-2019-12277 2026-10-21T10:23:25.341544+00:00

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname.

 https://cve.radiocsirt.org/vuln/ghsa-qcx4-gfh8-w5p5 GHSA-qcx4-gfh8-w5p5 — Blogifier does not properly restrict APIs 2026-10-21T10:23:25.341571+00:00

Affected: NuGet: Blogifier.Core

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for `..` in a pathname.

The issue is patched in the `2.4` branch, but `2.5.5` is the lowest available patched version on https://www.nuget.org/packages/Blogifier.Core.

 https://cve.radiocsirt.org/vuln/gsd-2019-12277 gsd-2019-12277 2026-10-21T10:23:25.341596+00:00 gsd-2019-12277