https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T10:28:37.940670+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-41280 CVE-2021-41280 — OS command injection in Sharetribe Go 2026-10-24T10:28:37.942306+00:00

Affected: sharetribe

Sharetribe Go is a source available marketplace software. In affected versions operating system command injection is possible on installations of Sharetribe Go, that do not have a secret AWS Simple Notification Service (SNS) notification token configured via the `sns_notification_token` configuration parameter. This configuration parameter is unset by default. The vulnerability has been patched in version 10.2.1. Users who are unable to upgrade should set the`sns_notification_token` configuration parameter to a secret value.