https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:29:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-00440 bdu:2019-00440 https://cve.radiocsirt.org/vuln/bdu:2019-00440 https://cve.radiocsirt.org/vuln/certfr-2018-avi-297 certfr-2018-avi-297 https://cve.radiocsirt.org/vuln/certfr-2018-avi-297 https://cve.radiocsirt.org/vuln/euvd-2026-168347 EUVD-2026-168347 https://cve.radiocsirt.org/vuln/euvd-2026-168347 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3760 <p>There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application&#39;s root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately.</p> <p>There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application&#39;s root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-3760 https://cve.radiocsirt.org/vuln/ghsa-pr3h-jjhj-573x <p><strong>Affected:</strong> RubyGems: sprockets</p> <p>Specially crafted requests can be used to access files that exist on the filesystem that is outside an application&#39;s root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately. ### Workaround: In Rails applications, work around this issue, set `config.assets.compile = false` and `config.public_file_server.enabled = true` in an initializer and precompile the assets.</p> <p>This work around will not be possible in all hosting environments and upgrading is advised.</p> <p><strong>Affected:</strong> RubyGems: sprockets</p> <p>Specially crafted requests can be used to access files that exist on the filesystem that is outside an application&#39;s root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately. ### Workaround: In Rails applications, work around this issue, set `config.assets.compile = false` and `config.public_file_server.enabled = true` in an initializer and precompile the assets.</p> <p>This work around will not be possible in all hosting environments and upgrading is advised.</p> https://cve.radiocsirt.org/vuln/ghsa-pr3h-jjhj-573x https://cve.radiocsirt.org/vuln/gsd-2018-3760 gsd-2018-3760 https://cve.radiocsirt.org/vuln/gsd-2018-3760 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11354-1 <p>ruby2.7-rubygem-sprockets-4.0.2-1.7 on GA media</p> <p>ruby2.7-rubygem-sprockets-4.0.2-1.7 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11354-1 https://cve.radiocsirt.org/vuln/rhsa-2018:2244 <p>rubygem-sprockets: Path traversal in forbidden_request?() can allow remote attackers to read arbitrary files</p> <p>rubygem-sprockets: Path traversal in forbidden_request?() can allow remote attackers to read arbitrary files</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2244 https://cve.radiocsirt.org/vuln/suse-su-2018:1994-1 <p>Security update for rubygem-sprockets</p> <p>Security update for rubygem-sprockets</p> https://cve.radiocsirt.org/vuln/suse-su-2018:1994-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-3760 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-sprockets, Ubuntu:18.04:LTS: ruby-sprockets</p> <p>There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application&#39;s root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-sprockets, Ubuntu:18.04:LTS: ruby-sprockets</p> <p>There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application&#39;s root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-3760 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1086 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1086