https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:51:47 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-jm92402 <p><strong>Affected:</strong> CleanStart: n8n</p> <p>Security vulnerability affects the n8n package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: n8n</p> <p>Security vulnerability affects the n8n package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-jm92402 https://cve.radiocsirt.org/vuln/euvd-2026-198303 EUVD-2026-198303 https://cve.radiocsirt.org/vuln/euvd-2026-198303 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7774 <p>A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.</p> <p>A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-7774 https://cve.radiocsirt.org/vuln/ghsa-hc5w-c9f8-9cc4 <p><strong>Affected:</strong> npm: langchain</p> <p>A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.</p> <p><strong>Affected:</strong> npm: langchain</p> <p>A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.</p> https://cve.radiocsirt.org/vuln/ghsa-hc5w-c9f8-9cc4 https://cve.radiocsirt.org/vuln/pysec-2024-111 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> PyPI: langchain</p> <p>A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> PyPI: langchain</p> <p>A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.</p> https://cve.radiocsirt.org/vuln/pysec-2024-111