https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:37:09.931397+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-246104 EUVD-2026-246104 2026-10-05T12:37:09.934175+00:00 EUVD-2026-246104 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6853 fkie_cve-2025-6853 2026-10-05T12:37:09.934206+00:00

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

 https://cve.radiocsirt.org/vuln/ghsa-qmgv-j263-qr33 GHSA-qmgv-j263-qr33 — Langchain-Chatchat has a Path Traversal vulnerability 2026-10-05T12:37:09.934238+00:00

Affected: PyPI: langchain-chatchat

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

 https://cve.radiocsirt.org/vuln/pysec-2026-1513 PYSEC-2026-1513 — Langchain-Chatchat has a Path Traversal vulnerability 2026-10-05T12:37:09.934262+00:00

Affected: PyPI: langchain-chatchat

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.