https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T03:59:11.862243+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-223993 EUVD-2026-223993 2026-10-06T03:59:11.913785+00:00 EUVD-2026-223993 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7957 fkie_cve-2024-7957 2026-10-06T03:59:11.913825+00:00

An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerability arises from the load_credentials method, where user-controlled input for realm_name and zuliprc_content is used to construct file paths and write file contents. This allows attackers to overwrite or create arbitrary files if a zuliprc- directory already exists in the temporary directory.

 https://cve.radiocsirt.org/vuln/ghsa-q6gg-j289-2hm4 GHSA-q6gg-j289-2hm4 2026-10-06T03:59:11.913861+00:00

An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerability arises from the load_credentials method, where user-controlled input for realm_name and zuliprc_content is used to construct file paths and write file contents. This allows attackers to overwrite or create arbitrary files if a zuliprc- directory already exists in the temporary directory.