https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:04:59 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2022-32190 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2022-32190 https://cve.radiocsirt.org/vuln/bit-golang-2022-32190 <p><strong>Affected:</strong> Bitnami: golang</p> <p>JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath(&#34;https://go.dev&#34;, &#34;../go&#34;) returns the URL &#34;https://go.dev/../go&#34;, despite the JoinPath documentation stating that ../ path elements are removed from the result.</p> <p><strong>Affected:</strong> Bitnami: golang</p> <p>JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath(&#34;https://go.dev&#34;, &#34;../go&#34;) returns the URL &#34;https://go.dev/../go&#34;, despite the JoinPath documentation stating that ../ path elements are removed from the result.</p> https://cve.radiocsirt.org/vuln/bit-golang-2022-32190 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1040 certfr-2022-avi-1040 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1040 https://cve.radiocsirt.org/vuln/euvd-2026-17220 EUVD-2026-17220 https://cve.radiocsirt.org/vuln/euvd-2026-17220 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32190 <p>JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath(&#34;https://go.dev&#34;, &#34;../go&#34;) returns the URL &#34;https://go.dev/../go&#34;, despite the JoinPath documentation stating that ../ path elements are removed from the result.</p> <p>JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath(&#34;https://go.dev&#34;, &#34;../go&#34;) returns the URL &#34;https://go.dev/../go&#34;, despite the JoinPath documentation stating that ../ path elements are removed from the result.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-32190 https://cve.radiocsirt.org/vuln/ghsa-q856-gh5w-3vwg <p>JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath(&#34;https://go.dev&#34;, &#34;../go&#34;) returns the URL &#34;https://go.dev/../go&#34;, despite the JoinPath documentation stating that ../ path elements are removed from the result.</p> <p>JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath(&#34;https://go.dev&#34;, &#34;../go&#34;) returns the URL &#34;https://go.dev/../go&#34;, despite the JoinPath documentation stating that ../ path elements are removed from the result.</p> https://cve.radiocsirt.org/vuln/ghsa-q856-gh5w-3vwg https://cve.radiocsirt.org/vuln/gsd-2022-32190 gsd-2022-32190 https://cve.radiocsirt.org/vuln/gsd-2022-32190 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12310-1 <p>go1.19-1.19.1-1.1 on GA media</p> <p>go1.19-1.19.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12310-1 https://cve.radiocsirt.org/vuln/rhba-2023:0568 <p>golang: net/url: JoinPath does not strip relative path components in all circumstances</p> <p>golang: net/url: JoinPath does not strip relative path components in all circumstances</p> https://cve.radiocsirt.org/vuln/rhba-2023:0568 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2134 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift ausnutzen, um einen Cross site Scripting Angriff durchzuführen, Informationen offenzulegen oder einen Denial of Service zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift ausnutzen, um einen Cross site Scripting Angriff durchzuführen, Informationen offenzulegen oder einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2134