https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 06:54:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-28136 EUVD-2026-28136 https://cve.radiocsirt.org/vuln/euvd-2026-28136 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32754 <p>FlowDroid is a data flow analysis tool. FlowDroid versions prior to 2.9.0 contained an XML external entity (XXE) vulnerability that allowed an attacker who had control over the source/sink definition file in XML format to read files from external locations. In order for this to occur, the XML-based format for sources and sinks had to be used and the attacker had to able control the source/sink definition file. The vulnerability was patched in version 2.9.0. As a workaround, do not allow untrusted entities to control the source/sink definition file.</p> <p>FlowDroid is a data flow analysis tool. FlowDroid versions prior to 2.9.0 contained an XML external entity (XXE) vulnerability that allowed an attacker who had control over the source/sink definition file in XML format to read files from external locations. In order for this to occur, the XML-based format for sources and sinks had to be used and the attacker had to able control the source/sink definition file. The vulnerability was patched in version 2.9.0. As a workaround, do not allow untrusted entities to control the source/sink definition file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32754 https://cve.radiocsirt.org/vuln/gsd-2021-32754 gsd-2021-32754 https://cve.radiocsirt.org/vuln/gsd-2021-32754