Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 04:06:11 +0000 cnvd-2017-35423 https://cve.radiocsirt.org/vuln/cnvd-2017-35423 cnvd-2017-35423 https://cve.radiocsirt.org/vuln/cnvd-2017-35423 EUVD-2026-80747 https://cve.radiocsirt.org/vuln/euvd-2026-80747 EUVD-2026-80747 https://cve.radiocsirt.org/vuln/euvd-2026-80747 fkie_cve-2017-1000052 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000052 <p>Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass filetype restrictions.</p> <p>Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass filetype restrictions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000052 GHSA-2q6v-32mr-8p8x — Null Byte Injection in Plug.Static https://cve.radiocsirt.org/vuln/ghsa-2q6v-32mr-8p8x <p><strong>Affected:</strong> Hex: plug</p> <p>Plug.Static is used for serving static assets, and is vulnerable to null byte injection. If file upload functionality is provided, this can allow users to bypass filetype restrictions. We recommend all applications that provide file upload functionality and serve those uploaded files locally with Plug.Static to upgrade immediately or include the fix below. If uploaded files are rather stored and served from S3 or any other cloud storage, you are not affected.</p> <p><strong>Affected:</strong> Hex: plug</p> <p>Plug.Static is used for serving static assets, and is vulnerable to null byte injection. If file upload functionality is provided, this can allow users to bypass filetype restrictions. We recommend all applications that provide file upload functionality and serve those uploaded files locally with Plug.Static to upgrade immediately or include the fix below. If uploaded files are rather stored and served from S3 or any other cloud storage, you are not affected.</p> https://cve.radiocsirt.org/vuln/ghsa-2q6v-32mr-8p8x gsd-2017-1000052 https://cve.radiocsirt.org/vuln/gsd-2017-1000052 gsd-2017-1000052 https://cve.radiocsirt.org/vuln/gsd-2017-1000052