https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:42:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-172308 EUVD-2026-172308 https://cve.radiocsirt.org/vuln/euvd-2026-172308 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7758 <p>This affects versions of package browserless-chrome before 1.40.2-chrome-stable. User input flowing from the workspace endpoint gets used to create a file path filePath and this is fetched and then sent back to a user. This can be escaped to fetch arbitrary files from a server.</p> <p>This affects versions of package browserless-chrome before 1.40.2-chrome-stable. User input flowing from the workspace endpoint gets used to create a file path filePath and this is fetched and then sent back to a user. This can be escaped to fetch arbitrary files from a server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7758 https://cve.radiocsirt.org/vuln/ghsa-8p9r-f949-699g <p><strong>Affected:</strong> npm: browserless-chrome</p> <p>This affects all versions of browserless-chrome before 1.43.0. User input flowing from the workspace endpoint gets used to create a file path filePath and this is fetched and then sent back to a user. This can be escaped to fetch arbitrary files from a server.</p> <p><strong>Affected:</strong> npm: browserless-chrome</p> <p>This affects all versions of browserless-chrome before 1.43.0. User input flowing from the workspace endpoint gets used to create a file path filePath and this is fetched and then sent back to a user. This can be escaped to fetch arbitrary files from a server.</p> https://cve.radiocsirt.org/vuln/ghsa-8p9r-f949-699g https://cve.radiocsirt.org/vuln/gsd-2020-7758 gsd-2020-7758 https://cve.radiocsirt.org/vuln/gsd-2020-7758