https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:29:29.418536+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-2969 EUVD-2026-2969 2026-10-08T11:29:29.468120+00:00 EUVD-2026-2969 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5334 fkie_cve-2024-5334 2026-10-08T11:29:29.468158+00:00

A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the 'snapshot_path' parameter in the '/api/get-browser-snapshot' endpoint. An attacker can exploit this vulnerability by crafting a request with a malicious 'snapshot_path' parameter, leading to arbitrary file read from the system. This issue impacts the security of the application by allowing unauthorized access to sensitive files on the server.

 https://cve.radiocsirt.org/vuln/ghsa-p7qc-844f-652r GHSA-p7qc-844f-652r 2026-10-08T11:29:29.468193+00:00

External Control of File Name or Path in GitHub repository stitionai/devika prior to -.