Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 11:11:48 +0000 EUVD-2026-206947 https://cve.radiocsirt.org/vuln/euvd-2026-206947 EUVD-2026-206947 https://cve.radiocsirt.org/vuln/euvd-2026-206947 fkie_cve-2024-21574 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21574 <p>The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install custom nodes which is added to the server by the extension. This allows an attacker to craft a request that triggers a pip install on a user controlled package or URL, resulting in remote code execution (RCE) on the server.</p> <p>The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install custom nodes which is added to the server by the extension. This allows an attacker to craft a request that triggers a pip install on a user controlled package or URL, resulting in remote code execution (RCE) on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-21574 GHSA-7p9r-9x76-5h9r https://cve.radiocsirt.org/vuln/ghsa-7p9r-9x76-5h9r <p>The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install custom nodes which is added to the server by the extension. This allows an attacker to craft a request that triggers a pip install on a user controlled package or URL, resulting in remote code execution (RCE) on the server.</p> <p>The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install custom nodes which is added to the server by the extension. This allows an attacker to craft a request that triggers a pip install on a user controlled package or URL, resulting in remote code execution (RCE) on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-7p9r-9x76-5h9r gsd-2024-21574 https://cve.radiocsirt.org/vuln/gsd-2024-21574 gsd-2024-21574 https://cve.radiocsirt.org/vuln/gsd-2024-21574