https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 08:58:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-233531 EUVD-2026-233531 https://cve.radiocsirt.org/vuln/euvd-2026-233531 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39296 <p>MelisAssetManager provides deliveries of Melis Platform&#39;s assets located in every module&#39;s public folder. Attackers can read arbitrary files on affected versions of `melisplatform/melis-asset-manager`, leading to the disclosure of sensitive information. Conducting this attack does not require authentication. Users should immediately upgrade to `melisplatform/melis-asset-manager` &gt;= 5.0.1. This issue was addressed by restricting access to files to intended directories only.</p> <p>MelisAssetManager provides deliveries of Melis Platform&#39;s assets located in every module&#39;s public folder. Attackers can read arbitrary files on affected versions of `melisplatform/melis-asset-manager`, leading to the disclosure of sensitive information. Conducting this attack does not require authentication. Users should immediately upgrade to `melisplatform/melis-asset-manager` &gt;= 5.0.1. This issue was addressed by restricting access to files to intended directories only.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-39296 https://cve.radiocsirt.org/vuln/ghsa-7fj2-rrq6-rphq <p><strong>Affected:</strong> Packagist: melisplatform/melis-asset-manager</p> <p>### Impact</p> <p>Attackers can read arbitrary files on affected versions of `melisplatform/melis-asset-manager`, leading to the disclosure of sensitive information. Conducting this attack does not require authentication.</p> <p>Users should immediately upgrade to `melisplatform/melis-asset-manager` &gt;= 5.0.1.</p> <p>### Patches</p> <p>This issue was addressed by restricting access to files to intended directories only.</p> <p>### References</p> <p>- https://github.com/melisplatform/melis-asset-manager/commit/a0f75918c049aff78953a0bc91c585153595d1bd</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, you can contact: - The original reporters, by sending an email to vulnerability.research [at] sonarsource.com; - The maintainers, by opening an issue on this repository.</p> <p><strong>Affected:</strong> Packagist: melisplatform/melis-asset-manager</p> <p>### Impact</p> <p>Attackers can read arbitrary files on affected versions of `melisplatform/melis-asset-manager`, leading to the disclosure of sensitive information. Conducting this attack does not require authentication.</p> <p>Users should immediately upgrade to `melisplatform/melis-asset-manager` &gt;= 5.0.1.</p> <p>### Patches</p> <p>This issue was addressed by restricting access to files to intended directories only.</p> <p>### References</p> <p>- https://github.com/melisplatform/melis-asset-manager/commit/a0f75918c049aff78953a0bc91c585153595d1bd</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, you can contact: - The original reporters, by sending an email to vulnerability.research [at] sonarsource.com; - The maintainers, by opening an issue on this repository.</p> https://cve.radiocsirt.org/vuln/ghsa-7fj2-rrq6-rphq https://cve.radiocsirt.org/vuln/gsd-2022-39296 gsd-2022-39296 https://cve.radiocsirt.org/vuln/gsd-2022-39296