https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 09:04:58 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-14535 cnvd-2018-14535 https://cve.radiocsirt.org/vuln/cnvd-2018-14535 https://cve.radiocsirt.org/vuln/euvd-2026-177590 EUVD-2026-177590 https://cve.radiocsirt.org/vuln/euvd-2026-177590 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16029 <p>hostr is a simple web server that serves up the contents of the current directory. There is a directory traversal vulnerability in hostr 2.3.5 and earlier that allows an attacker to read files outside the current directory by sending `../` in the url path for GET requests.</p> <p>hostr is a simple web server that serves up the contents of the current directory. There is a directory traversal vulnerability in hostr 2.3.5 and earlier that allows an attacker to read files outside the current directory by sending `../` in the url path for GET requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16029 https://cve.radiocsirt.org/vuln/ghsa-xqqr-p362-6rmc <p><strong>Affected:</strong> npm: hostr</p> <p>Affected versions of `hostr` are vulnerable to directory traversal which allows attackers to read files outside the current directory by sending `../` in the url path for GET requests.</p> <p>## Recommendation</p> <p>Upgrade to version 2.3.6 or later.</p> <p><strong>Affected:</strong> npm: hostr</p> <p>Affected versions of `hostr` are vulnerable to directory traversal which allows attackers to read files outside the current directory by sending `../` in the url path for GET requests.</p> <p>## Recommendation</p> <p>Upgrade to version 2.3.6 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-xqqr-p362-6rmc https://cve.radiocsirt.org/vuln/gsd-2017-16029 gsd-2017-16029 https://cve.radiocsirt.org/vuln/gsd-2017-16029