https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:46:58 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-09046 cnvd-2019-09046 https://cve.radiocsirt.org/vuln/cnvd-2019-09046 https://cve.radiocsirt.org/vuln/euvd-2026-65691 EUVD-2026-65691 https://cve.radiocsirt.org/vuln/euvd-2026-65691 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12026 <p>During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in turn can result in information disclosure and privilege escalation.</p> <p>During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in turn can result in information disclosure and privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-12026 https://cve.radiocsirt.org/vuln/ghsa-7cv3-gvmc-8mq5 <p><strong>Affected:</strong> RubyGems: passenger</p> <p>During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in turn can result in information disclosure and privilege escalation.</p> <p><strong>Affected:</strong> RubyGems: passenger</p> <p>During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in turn can result in information disclosure and privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-7cv3-gvmc-8mq5 https://cve.radiocsirt.org/vuln/gsd-2018-12026 gsd-2018-12026 https://cve.radiocsirt.org/vuln/gsd-2018-12026 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11341-1 <p>ruby2.7-rubygem-passenger-6.0.8-3.2 on GA media</p> <p>ruby2.7-rubygem-passenger-6.0.8-3.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11341-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12026 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: passenger</p> <p>During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in turn can result in information disclosure and privilege escalation.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: passenger</p> <p>During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in turn can result in information disclosure and privilege escalation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12026