https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T15:46:44.506332+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-318939 EUVD-2026-318939 2026-10-09T15:46:44.552615+00:00 EUVD-2026-318939 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41552 fkie_cve-2026-41552 2026-10-09T15:46:44.552651+00:00

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated PDF.

This issue was fixed in PDF Export Module version 0.7.6.

 https://cve.radiocsirt.org/vuln/ghsa-cj88-m5vv-89m3 GHSA-cj88-m5vv-89m3 2026-10-09T15:46:44.552686+00:00

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated PDF.

This issue was fixed in PDF Export Module version 0.7.6.