https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T18:42:29.000017+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-163341 EUVD-2026-163341 2026-10-27T18:42:29.003912+00:00 EUVD-2026-163341 https://cve.radiocsirt.org/vuln/fkie_cve-2021-46897 fkie_cve-2021-46897 2026-10-27T18:42:29.003944+00:00

views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.

 https://cve.radiocsirt.org/vuln/ghsa-h454-rq3m-89rc GHSA-h454-rq3m-89rc — Wagtail CRX CodeRed Extensions vulnerable to Path Traversal 2026-10-27T18:42:29.003974+00:00

Affected: PyPI: coderedcms

views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.

 https://cve.radiocsirt.org/vuln/gsd-2021-46897 gsd-2021-46897 2026-10-27T18:42:29.003997+00:00 gsd-2021-46897 https://cve.radiocsirt.org/vuln/pysec-2023-210 PYSEC-2023-210 2026-10-27T18:42:29.004010+00:00

Affected: PyPI: coderedcms

views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.