https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 18:53:54 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-07458 cnvd-2018-07458 https://cve.radiocsirt.org/vuln/cnvd-2018-07458 https://cve.radiocsirt.org/vuln/euvd-2026-166365 EUVD-2026-166365 https://cve.radiocsirt.org/vuln/euvd-2026-166365 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5350 <p>In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry using Diego and Garden installations with a malicious custom buildpack an end user could read files on the host system that the BOSH-created vcap user has permissions to read and then package them into their app droplet.</p> <p>In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry using Diego and Garden installations with a malicious custom buildpack an end user could read files on the host system that the BOSH-created vcap user has permissions to read and then package them into their app droplet.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5350 https://cve.radiocsirt.org/vuln/ghsa-3fq5-m2m4-f2qw <p>In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry using Diego and Garden installations with a malicious custom buildpack an end user could read files on the host system that the BOSH-created vcap user has permissions to read and then package them into their app droplet.</p> <p>In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry using Diego and Garden installations with a malicious custom buildpack an end user could read files on the host system that the BOSH-created vcap user has permissions to read and then package them into their app droplet.</p> https://cve.radiocsirt.org/vuln/ghsa-3fq5-m2m4-f2qw https://cve.radiocsirt.org/vuln/gsd-2015-5350 gsd-2015-5350 https://cve.radiocsirt.org/vuln/gsd-2015-5350