https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:08:24 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2022-41722 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2022-41722 https://cve.radiocsirt.org/vuln/bit-golang-2022-41722 <p><strong>Affected:</strong> Bitnami: golang</p> <p>A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as &#34;a/../c:/b&#34; into the valid path &#34;c:\b&#34;. This transformation of a relative (if invalid) path into an absolute path could enable a directory traversal attack. After fix, the filepath.Clean function transforms this path into the relative (but still invalid) path &#34;.\c:\b&#34;.</p> <p><strong>Affected:</strong> Bitnami: golang</p> <p>A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as &#34;a/../c:/b&#34; into the valid path &#34;c:\b&#34;. This transformation of a relative (if invalid) path into an absolute path could enable a directory traversal attack. After fix, the filepath.Clean function transforms this path into the relative (but still invalid) path &#34;.\c:\b&#34;.</p> https://cve.radiocsirt.org/vuln/bit-golang-2022-41722 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0272 certfr-2023-avi-0272 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0272 https://cve.radiocsirt.org/vuln/euvd-2026-221305 EUVD-2026-221305 https://cve.radiocsirt.org/vuln/euvd-2026-221305 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41722 <p>A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as &#34;a/../c:/b&#34; into the valid path &#34;c:\b&#34;. This transformation of a relative (if invalid) path into an absolute path could enable a directory traversal attack. After fix, the filepath.Clean function transforms this path into the relative (but still invalid) path &#34;.\c:\b&#34;.</p> <p>A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as &#34;a/../c:/b&#34; into the valid path &#34;c:\b&#34;. This transformation of a relative (if invalid) path into an absolute path could enable a directory traversal attack. After fix, the filepath.Clean function transforms this path into the relative (but still invalid) path &#34;.\c:\b&#34;.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41722 https://cve.radiocsirt.org/vuln/ghsa-fp44-cj2j-3jhx <p>A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as &#34;a/../c:/b&#34; into the valid path &#34;c:\b&#34;. This transformation of a relative (if invalid) path into an absolute path could enable a directory traversal attack. After fix, the filepath.Clean function transforms this path into the relative (but still invalid) path &#34;.\c:\b&#34;.</p> <p>A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as &#34;a/../c:/b&#34; into the valid path &#34;c:\b&#34;. This transformation of a relative (if invalid) path into an absolute path could enable a directory traversal attack. After fix, the filepath.Clean function transforms this path into the relative (but still invalid) path &#34;.\c:\b&#34;.</p> https://cve.radiocsirt.org/vuln/ghsa-fp44-cj2j-3jhx https://cve.radiocsirt.org/vuln/gsd-2022-41722 gsd-2022-41722 https://cve.radiocsirt.org/vuln/gsd-2022-41722 https://cve.radiocsirt.org/vuln/msrc_cve-2022-41722 msrc_CVE-2022-41722 https://cve.radiocsirt.org/vuln/msrc_cve-2022-41722 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12707-1 <p>go1.19-1.19.6-1.1 on GA media</p> <p>go1.19-1.19.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12707-1 https://cve.radiocsirt.org/vuln/rhsa-2023:1325 <p>buildah: possible information disclosure and modification OpenShift: Missing HTTP Strict Transport Security golang: crash in a golang.org/x/crypto/ssh server golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests golang: path/filepath: path-filepath filepath.Clean path traversal golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding golang: crypto/tls: large handshake records may cause panics golang: net/http, mime/multipart: denial of service from excessive resource consumption haproxy: segfault DoS openshift/apiserver-library-go: Bypass of SCC seccomp profile restrictions podman: symlink exchange attack in podman export volume python-werkzeug: high resource usage when parsing multipart form data with many fields haproxy: request smuggling attack in HTTP/1 header parsing</p> <p>buildah: possible information disclosure and modification OpenShift: Missing HTTP Strict Transport Security golang: crash in a golang.org/x/crypto/ssh server golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests golang: path/filepath: path-filepath filepath.Clean path traversal golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding golang: crypto/tls: large handshake records may cause panics golang: net/http, mime/multipart: denial of service from excessive resource consumption haproxy: segfault DoS openshift/apiserver-library-go: Bypass of SCC seccomp profile restrictions podman: symlink exchange attack in podman export volume python-werkzeug: high resource usage when parsing multipart form data with many fields haproxy: request smuggling attack in HTTP/1 header parsing</p> https://cve.radiocsirt.org/vuln/rhsa-2023:1325 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1354 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1354