https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 17:14:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-260383 EUVD-2026-260383 https://cve.radiocsirt.org/vuln/euvd-2026-260383 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64184 <p>Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic (page URL, image URL, page content, etc.). While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type header. This allows a remote attacker (or a Man-in-the-Middle, if the comic is served over HTTP) to write arbitrary files outside the target directory (if additional conditions are met). This issue is fixed in version 3.2.</p> <p>Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic (page URL, image URL, page content, etc.). While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type header. This allows a remote attacker (or a Man-in-the-Middle, if the comic is served over HTTP) to write arbitrary files outside the target directory (if additional conditions are met). This issue is fixed in version 3.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-64184 https://cve.radiocsirt.org/vuln/ghsa-4vcx-3pj3-44m7 <p><strong>Affected:</strong> PyPI: dosage</p> <p>### Impact</p> <p>When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic (page URL, image URL, page content, etc.). While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP `Content-Type` header. This allows a remote attacker (or a Man-in-the-Middle, if the comic is served over HTTP) to write arbitrary files outside the target directory (if additional conditions are met).</p> <p>### Patches</p> <p>Fixed in release 3.2. The [fix is small and self-contained](https://github.com/webcomics/dosage/commit/336a9684191604bc49eed7296b74bd582151181e), so distributors might elect to backport the fix to older versions.</p> <p>### Workarounds</p> <p>No</p> <p><strong>Affected:</strong> PyPI: dosage</p> <p>### Impact</p> <p>When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic (page URL, image URL, page content, etc.). While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP `Content-Type` header. This allows a remote attacker (or a Man-in-the-Middle, if the comic is served over HTTP) to write arbitrary files outside the target directory (if additional conditions are met).</p> <p>### Patches</p> <p>Fixed in release 3.2. The [fix is small and self-contained](https://github.com/webcomics/dosage/commit/336a9684191604bc49eed7296b74bd582151181e), so distributors might elect to backport the fix to older versions.</p> <p>### Workarounds</p> <p>No</p> https://cve.radiocsirt.org/vuln/ghsa-4vcx-3pj3-44m7 https://cve.radiocsirt.org/vuln/pysec-2026-1316 <p><strong>Affected:</strong> PyPI: dosage</p> <p>### Impact</p> <p>When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic (page URL, image URL, page content, etc.). While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP `Content-Type` header. This allows a remote attacker (or a Man-in-the-Middle, if the comic is served over HTTP) to write arbitrary files outside the target directory (if additional conditions are met).</p> <p>### Patches</p> <p>Fixed in release 3.2. The [fix is small and self-contained](https://github.com/webcomics/dosage/commit/336a9684191604bc49eed7296b74bd582151181e), so distributors might elect to backport the fix to older versions.</p> <p>### Workarounds</p> <p>No</p> <p><strong>Affected:</strong> PyPI: dosage</p> <p>### Impact</p> <p>When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic (page URL, image URL, page content, etc.). While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP `Content-Type` header. This allows a remote attacker (or a Man-in-the-Middle, if the comic is served over HTTP) to write arbitrary files outside the target directory (if additional conditions are met).</p> <p>### Patches</p> <p>Fixed in release 3.2. The [fix is small and self-contained](https://github.com/webcomics/dosage/commit/336a9684191604bc49eed7296b74bd582151181e), so distributors might elect to backport the fix to older versions.</p> <p>### Workarounds</p> <p>No</p> https://cve.radiocsirt.org/vuln/pysec-2026-1316 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-64184 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: dosage, Ubuntu:18.04:LTS: dosage, Ubuntu:20.04:LTS: dosage, Ubuntu:22.04:LTS: dosage, Ubuntu:24.04:LTS: dosage, Ubuntu:25.10: dosage, Ubuntu:26.10: dosage, Ubuntu:26.04:LTS: dosage</p> <p>Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic (page URL, image URL, page content, etc.). While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type header. This allows a remote attacker (or a Man-in-the-Middle, if the comic is served over HTTP) to write arbitrary files outside the target directory (if additional conditions are met). This issue is fixed in version 3.2.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: dosage, Ubuntu:18.04:LTS: dosage, Ubuntu:20.04:LTS: dosage, Ubuntu:22.04:LTS: dosage, Ubuntu:24.04:LTS: dosage, Ubuntu:25.10: dosage, Ubuntu:26.10: dosage, Ubuntu:26.04:LTS: dosage</p> <p>Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic (page URL, image URL, page content, etc.). While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type header. This allows a remote attacker (or a Man-in-the-Middle, if the comic is served over HTTP) to write arbitrary files outside the target directory (if additional conditions are met). This issue is fixed in version 3.2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-64184