https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:40:55.914175+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244632 EUVD-2026-244632 2026-10-08T05:40:55.965540+00:00 EUVD-2026-244632 https://cve.radiocsirt.org/vuln/fkie_cve-2024-57189 fkie_cve-2024-57189 2026-10-08T05:40:55.965614+00:00

In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler.

 https://cve.radiocsirt.org/vuln/ghsa-2977-5php-6789 GHSA-2977-5php-6789 — Erxes Path Traversal vulnerability 2026-10-08T05:40:55.965649+00:00

Affected: npm: erxes

In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler.