https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:08:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-373908 EUVD-2026-373908 https://cve.radiocsirt.org/vuln/euvd-2026-373908 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87766 <p>A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is GHSA-pxhw-h44j-8pfx. It is fixed in bubblewrap 0.12.0.</p> <p>A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is GHSA-pxhw-h44j-8pfx. It is fixed in bubblewrap 0.12.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-87766 https://cve.radiocsirt.org/vuln/msrc_cve-2026-87766 msrc_CVE-2026-87766 https://cve.radiocsirt.org/vuln/msrc_cve-2026-87766 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11873-1 <p>flatpak-1.18.3-1.1 on GA media</p> <p>flatpak-1.18.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11873-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87766 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: bubblewrap, Ubuntu:Pro:20.04:LTS: bubblewrap, Ubuntu:22.04:LTS: bubblewrap, Ubuntu:24.04:LTS: bubblewrap, Ubuntu:26.04:LTS: bubblewrap</p> <p>A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is GHSA-pxhw-h44j-8pfx. It is fixed in bubblewrap 0.12.0.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: bubblewrap, Ubuntu:Pro:20.04:LTS: bubblewrap, Ubuntu:22.04:LTS: bubblewrap, Ubuntu:24.04:LTS: bubblewrap, Ubuntu:26.04:LTS: bubblewrap</p> <p>A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is GHSA-pxhw-h44j-8pfx. It is fixed in bubblewrap 0.12.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87766