https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:37:34.123286+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06214 bdu:2022-06214 2026-10-08T14:37:34.126917+00:00 bdu:2022-06214 https://cve.radiocsirt.org/vuln/euvd-2026-177675 EUVD-2026-177675 2026-10-08T14:37:34.126951+00:00 EUVD-2026-177675 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3779 fkie_cve-2021-3779 2026-10-08T14:37:34.126965+00:00

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later.

 https://cve.radiocsirt.org/vuln/ghsa-73pr-g6jj-5hc9 GHSA-73pr-g6jj-5hc9 — Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql 2026-10-08T14:37:34.127001+00:00

Affected: RubyGems: ruby-mysql

A malicious actor can read arbitrary files from a client that uses ruby-mysql to communicate to a rogue MySQL server and issue database queries. In these cases, the server has the option to create a database reply using the LOAD DATA LOCAL statement, which instructs the client to provide additional data from a local file readable by the client (and not a "local" file on the server).

 https://cve.radiocsirt.org/vuln/gsd-2021-3779 gsd-2021-3779 2026-10-08T14:37:34.127029+00:00 gsd-2021-3779 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3779 UBUNTU-CVE-2021-3779 2026-10-08T14:37:34.127041+00:00

Affected: Ubuntu:16.04:LTS: ruby-mysql

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later.