https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T12:40:06.463948+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-6278 CVE-2025-6278 — Upsonic server.py os.path.join path traversal 2026-10-15T12:40:06.466538+00:00

Affected: Upsonic

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used.

 https://cve.radiocsirt.org/vuln/ghsa-8jf4-fcjr-68c2 GHSA-8jf4-fcjr-68c2 — Upsonic is vulnerable to Path Traversal attack through its os.path.join function 2026-10-15T12:40:06.466600+00:00

Affected: PyPI: upsonic

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used.