https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 08:39:16 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-34459 cnvd-2019-34459 https://cve.radiocsirt.org/vuln/cnvd-2019-34459 https://cve.radiocsirt.org/vuln/euvd-2026-58227 EUVD-2026-58227 https://cve.radiocsirt.org/vuln/euvd-2026-58227 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17109 <p>Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.</p> <p>Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-17109 https://cve.radiocsirt.org/vuln/ghsa-7498-c9fm-g64p <p><strong>Affected:</strong> PyPI: koji</p> <p>The way that the hub code validates upload paths allows for an attacker to choose an arbitrary destination for the uploaded file. Uploading still requires login. However, an attacker with credentials could damage the integrity of the Koji system.</p> <p>### Workaround There is no known workaround. All Koji admins are encouraged to update to a fixed version as soon as possible.</p> <p>### Fix Koji versions 1.14.3, 1.15.3, 1.16.3, 1.17.1, and 1.18.1 all include patches to solve this vulnerability.</p> <p><strong>Affected:</strong> PyPI: koji</p> <p>The way that the hub code validates upload paths allows for an attacker to choose an arbitrary destination for the uploaded file. Uploading still requires login. However, an attacker with credentials could damage the integrity of the Koji system.</p> <p>### Workaround There is no known workaround. All Koji admins are encouraged to update to a fixed version as soon as possible.</p> <p>### Fix Koji versions 1.14.3, 1.15.3, 1.16.3, 1.17.1, and 1.18.1 all include patches to solve this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-7498-c9fm-g64p https://cve.radiocsirt.org/vuln/gsd-2019-17109 gsd-2019-17109 https://cve.radiocsirt.org/vuln/gsd-2019-17109 https://cve.radiocsirt.org/vuln/pysec-2019-183 <p><strong>Affected:</strong> PyPI: koji</p> <p>Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.</p> <p><strong>Affected:</strong> PyPI: koji</p> <p>Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.</p> https://cve.radiocsirt.org/vuln/pysec-2019-183 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17109 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: koji, Ubuntu:18.04:LTS: koji</p> <p>Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: koji, Ubuntu:18.04:LTS: koji</p> <p>Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17109