https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T03:24:03.351676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-264165 EUVD-2026-264165 2026-10-23T03:24:03.353857+00:00 EUVD-2026-264165 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66905 fkie_cve-2025-66905 2026-10-23T03:24:03.353887+00:00

The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them against the filesystem. A remote attacker can include ../ sequences in the request path to escape the configured base directory and read arbitrary files from the host system.

 https://cve.radiocsirt.org/vuln/ghsa-pf68-273c-7668 GHSA-pf68-273c-7668 2026-10-23T03:24:03.353919+00:00

The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them against the filesystem. A remote attacker can include ../ sequences in the request path to escape the configured base directory and read arbitrary files from the host system.