https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:06:33.249656+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338016 EUVD-2026-338016 2026-10-06T16:06:33.310558+00:00 EUVD-2026-338016 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43637 fkie_cve-2026-43637 2026-10-06T16:06:33.310597+00:00

Cornac before 2.6.0 contains a path traversal (Tar Slip) vulnerability that allows attackers to write arbitrary files outside the intended cache directory by supplying a crafted TAR archive containing ../ sequences, absolute paths, or symlink/hardlink entries to the _extract_archive() function in cornac/utils/download.py. Attackers can trigger this vulnerability through the built-in dataset loaders, which automatically download and extract archives, causing archive.extractall() to write files to arbitrary locations on the filesystem accessible to the running process.

 https://cve.radiocsirt.org/vuln/ghsa-rrh3-cwwj-g5mg GHSA-rrh3-cwwj-g5mg 2026-10-06T16:06:33.310632+00:00

Cornac before 2.6.0 contains a path traversal (Tar Slip) vulnerability that allows attackers to write arbitrary files outside the intended cache directory by supplying a crafted TAR archive containing ../ sequences, absolute paths, or symlink/hardlink entries to the _extract_archive() function in cornac/utils/download.py. Attackers can trigger this vulnerability through the built-in dataset loaders, which automatically download and extract archives, causing archive.extractall() to write files to arbitrary locations on the filesystem accessible to the running process.