https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:41:44.034853+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2006-3458 CVE-2006-3458 2026-10-02T09:41:44.038900+00:00

Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.

 https://cve.radiocsirt.org/vuln/ghsa-jcjp-qqpq-pc54 GHSA-jcjp-qqpq-pc54 — Zope allows local users to read arbitrary files 2026-10-02T09:41:44.038966+00:00

Affected: PyPI: Zope2

Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.