https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:41:23.630106+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373259 EUVD-2026-373259 2026-10-06T14:41:23.692070+00:00 EUVD-2026-373259 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93955 fkie_cve-2026-93955 2026-10-06T14:41:23.692109+00:00

A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected by this vulnerability is the function streamFileToResponse of the file backend/src/main/java/org/booklore/controller/KoboController.java of the component Download Endpoint. Performing a manipulation of the argument bookId results in authorization bypass. The attack may be initiated remotely. The exploit is now public and may be used. Issue #2431 is closed as completed, but its only comment states that the issue “has already been reported elsewhere.” No fixing commit or pull request is identified there.

 https://cve.radiocsirt.org/vuln/ghsa-frhf-rqp4-m3jc GHSA-frhf-rqp4-m3jc 2026-10-06T14:41:23.692147+00:00

A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected by this vulnerability is the function streamFileToResponse of the file backend/src/main/java/org/booklore/controller/KoboController.java of the component Download Endpoint. Performing a manipulation of the argument bookId results in authorization bypass. The attack may be initiated remotely. The exploit is now public and may be used. Issue #2431 is closed as completed, but its only comment states that the issue “has already been reported elsewhere.” No fixing commit or pull request is identified there.