https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:16:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-277823 EUVD-2026-277823 https://cve.radiocsirt.org/vuln/euvd-2026-277823 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5025 <p>The &#39;/logs&#39; and &#39;/logs-stream&#39; endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication (&#39;get_current_active_user&#39;) without any privilege checks (e.g., &#39;is_superuser&#39;).</p> <p>The &#39;/logs&#39; and &#39;/logs-stream&#39; endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication (&#39;get_current_active_user&#39;) without any privilege checks (e.g., &#39;is_superuser&#39;).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-5025 https://cve.radiocsirt.org/vuln/ghsa-jpqv-w4r8-mmqw <p>The &#39;/logs&#39; and &#39;/logs-stream&#39; endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication (&#39;get_current_active_user&#39;) without any privilege checks (e.g., &#39;is_superuser&#39;).</p> <p>The &#39;/logs&#39; and &#39;/logs-stream&#39; endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication (&#39;get_current_active_user&#39;) without any privilege checks (e.g., &#39;is_superuser&#39;).</p> https://cve.radiocsirt.org/vuln/ghsa-jpqv-w4r8-mmqw https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0900 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Langflow ausnutzen, um Informationen offenzulegen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Langflow ausnutzen, um Informationen offenzulegen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0900