https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T06:41:34.784255+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325516 EUVD-2026-325516 2026-10-15T06:41:34.786555+00:00 EUVD-2026-325516 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49233 fkie_cve-2026-49233 2026-10-15T06:41:34.786585+00:00

Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths for the Routinator cache. This allows for path traversal by having a module name containing .., potentially providing an attacker access to the entire Routinator rsync cache.

 https://cve.radiocsirt.org/vuln/ghsa-33mj-99mg-8g73 GHSA-33mj-99mg-8g73 — Routinator has cache path traversal when processing the module component of rsync URIs 2026-10-15T06:41:34.786615+00:00

Affected: crates.io: routinator

Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths for the Routinator cache. This allows for path traversal by having a module name containing .., potentially providing an attacker access to the entire Routinator rsync cache.