https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T09:20:53.152258+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-318940 EUVD-2026-318940 2026-10-09T09:20:53.154458+00:00 EUVD-2026-318940 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7182 fkie_cve-2026-7182 2026-10-09T09:20:53.154491+00:00

Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated pdf.

This issue was fixed in version 1.1.1.

 https://cve.radiocsirt.org/vuln/ghsa-hr7c-pw36-w99g GHSA-hr7c-pw36-w99g 2026-10-09T09:20:53.154526+00:00

Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated pdf.

This issue was fixed in version 1.1.1.