https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T20:44:52.157247+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-223456 EUVD-2026-223456 2026-10-22T20:44:52.159295+00:00 EUVD-2026-223456 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47049 fkie_cve-2024-47049 2026-10-22T20:44:52.159324+00:00

The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.

 https://cve.radiocsirt.org/vuln/ghsa-6rgh-r6j3-3223 GHSA-6rgh-r6j3-3223 — czim/file-handling vulnerable to SSRF and directory traversal 2026-10-22T20:44:52.159354+00:00

Affected: Packagist: czim/file-handling

The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.