https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:48:00.803645+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-31154 CVE-2021-31154 2026-10-06T12:48:00.805554+00:00

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.

 https://cve.radiocsirt.org/vuln/ghsa-pp74-39w2-v4w9 GHSA-pp74-39w2-v4w9 — Permissions bypass in pleaser 2026-10-06T12:48:00.805610+00:00

Affected: crates.io: pleaser

pleaseedit in pleaser before 0.4.0 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.