https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:02:13 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-05902 cnvd-2015-05902 https://cve.radiocsirt.org/vuln/cnvd-2015-05902 https://cve.radiocsirt.org/vuln/euvd-2026-93676 EUVD-2026-93676 https://cve.radiocsirt.org/vuln/euvd-2026-93676 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5688 <p>Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.</p> <p>Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5688 https://cve.radiocsirt.org/vuln/ghsa-333x-9vgq-v2j4 <p><strong>Affected:</strong> npm: geddy</p> <p>Versions 13.0.8 and earlier of geddy are vulnerable to a directory traversal attack via URI encoded attack vectors.</p> <p>### Proof of Concept ``` http://localhost:4000/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd ```</p> <p>## Recommendation</p> <p>Update geddy to version &gt;= 13.0.8</p> <p><strong>Affected:</strong> npm: geddy</p> <p>Versions 13.0.8 and earlier of geddy are vulnerable to a directory traversal attack via URI encoded attack vectors.</p> <p>### Proof of Concept ``` http://localhost:4000/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd ```</p> <p>## Recommendation</p> <p>Update geddy to version &gt;= 13.0.8</p> https://cve.radiocsirt.org/vuln/ghsa-333x-9vgq-v2j4 https://cve.radiocsirt.org/vuln/gsd-2015-5688 gsd-2015-5688 https://cve.radiocsirt.org/vuln/gsd-2015-5688