https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T22:58:32.130489+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2025-fs45495 CLEANSTART-2025-FS45495 — Security fix for GHSA-gwrp-pvrq-jmwv applied in: druid-fips 35.0.0-r1 2026-10-27T22:58:32.132540+00:00

Affected: CleanStart: druid-fips

Security vulnerability affects the druid-fips package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cve-2021-29425 CVE-2021-29425 — Possible limited path traversal vulnerabily in Apache Commons IO 2026-10-27T22:58:32.132589+00:00

Affected: Apache Software Foundation Apache Commons IO

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.