https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T15:50:30.616172+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-317357 EUVD-2026-317357 2026-10-08T15:50:30.649689+00:00 EUVD-2026-317357 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42564 fkie_cve-2026-42564 2026-10-08T15:50:30.649731+00:00

jotty·page is a self-hosted app for your checklists and notes. Prior to 1.22.0, an unauthenticated path traversal vulnerability exists in /api/app-icons/[filename]. The filename route parameter is joined into a filesystem path without traversal/boundary validation, allowing file reads outside data/uploads/app-icons/. This vulnerability is fixed in 1.22.0.