https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:44:11.790842+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:4587 ALSA-2022:4587 — Important: pcs security update 2026-10-08T21:44:12.156163+00:00

Affected: AlmaLinux:9: pcs, AlmaLinux:9: pcs-snmp

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * sinatra: path traversal possible outside of public_dir when serving static files (CVE-2022-29970) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-00294 bdu:2023-00294 2026-10-08T21:44:12.156238+00:00 bdu:2023-00294 https://cve.radiocsirt.org/vuln/brew-mailcatcher-cve-2022-29970 BREW-mailcatcher-CVE-2022-29970 — sinatra does not validate expanded path matches 2026-10-08T21:44:12.156257+00:00

Affected: Homebrew: mailcatcher

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

 https://cve.radiocsirt.org/vuln/euvd-2026-258804 EUVD-2026-258804 2026-10-08T21:44:12.156279+00:00 EUVD-2026-258804 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29970 fkie_cve-2022-29970 2026-10-08T21:44:12.156292+00:00

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

 https://cve.radiocsirt.org/vuln/ghsa-qp49-3pvw-x4m5 GHSA-qp49-3pvw-x4m5 — sinatra does not validate expanded path matches 2026-10-08T21:44:12.156312+00:00

Affected: RubyGems: sinatra

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

 https://cve.radiocsirt.org/vuln/gsd-2022-29970 gsd-2022-29970 2026-10-08T21:44:12.156331+00:00 gsd-2022-29970 https://cve.radiocsirt.org/vuln/rhsa-2022:2253 RHSA-2022:2253 — Red Hat Security Advisory: pcs security update 2026-10-08T21:44:12.156343+00:00

sinatra: path traversal possible outside of public_dir when serving static files

 https://cve.radiocsirt.org/vuln/rhsa-2022:4587 RHSA-2022:4587 — Red Hat Security Advisory: pcs security update 2026-10-08T21:44:12.156359+00:00

sinatra: path traversal possible outside of public_dir when serving static files

 https://cve.radiocsirt.org/vuln/suse-su-2022:2046-1 SUSE-SU-2022:2046-1 — Security update for rubygem-sinatra 2026-10-08T21:44:12.156374+00:00

Security update for rubygem-sinatra

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-29970 UBUNTU-CVE-2022-29970 2026-10-08T21:44:12.156388+00:00

Affected: Ubuntu:Pro:16.04:LTS: ruby-sinatra, Ubuntu:Pro:18.04:LTS: ruby-sinatra, Ubuntu:22.04:LTS: ruby-sinatra

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0267 WID-SEC-W-2022-0267 — Red Hat Enterprise Linux (pcs): Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-08T21:44:12.156409+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (pcs) ausnutzen, um Informationen offenzulegen.