https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T02:42:31.345788+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-95236 cnvd-2021-95236 2026-10-23T02:42:31.349720+00:00 cnvd-2021-95236 https://cve.radiocsirt.org/vuln/euvd-2026-32678 EUVD-2026-32678 2026-10-23T02:42:31.349755+00:00 EUVD-2026-32678 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43788 fkie_cve-2021-43788 2026-10-23T02:42:31.349770+00:00

Nodebb is an open source Node.js based forum software. Prior to v1.18.5, a path traversal vulnerability was present that allowed users to access JSON files outside of the expected `languages/` directory. The vulnerability has been patched as of v1.18.5. Users are advised to upgrade as soon as possible.

 https://cve.radiocsirt.org/vuln/ghsa-pfj7-2qfw-vwgm GHSA-pfj7-2qfw-vwgm — NodeBB vulnerable to path traversal in translator module 2026-10-23T02:42:31.349799+00:00

Affected: npm: nodebb

### Impact Prior to v1.18.5, a path traversal vulnerability was present that allowed users to access JSON files outside of the expected `languages/` directory.

### Patches The vulnerability has been patched as of v1.18.5.

### Workarounds Cherry-pick commit hash `c8b2fc46dc698db687379106b3f01c71b80f495f` to receive this patch in lieu of a full upgrade.

### For more information If you have any questions or comments about this advisory: * Email us at [security@nodebb.org](mailto:security@nodebb.org)

 https://cve.radiocsirt.org/vuln/gsd-2021-43788 gsd-2021-43788 2026-10-23T02:42:31.349826+00:00 gsd-2021-43788