https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T16:55:44.431733+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-158685 EUVD-2026-158685 2026-10-16T16:55:44.433991+00:00 EUVD-2026-158685 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42360 fkie_cve-2024-42360 2026-10-16T16:55:44.434024+00:00

SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user interface for personal or group use. Several HTTP endpoints did not properly sanitize user input and/or query parameters. This could be exploited to inject and run unwanted shell commands. This vulnerability has been fixed in 3.1.2.

 https://cve.radiocsirt.org/vuln/ghsa-qv32-5wm2-p32h GHSA-qv32-5wm2-p32h — Command Injection in sequenceserver 2026-10-16T16:55:44.434055+00:00

Affected: RubyGems: sequenceserver

### Impact

Several HTTP endpoints did not properly sanitize user input and/or query parameters. This could be exploited to inject and run unwanted shell commands

### Patches

Fixed in 3.1.2

### Workarounds

No known workarounds