https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:39:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-4480 EUVD-2026-4480 https://cve.radiocsirt.org/vuln/euvd-2026-4480 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28189 <p>Judge0 is an open-source online code execution system. The application uses the UNIX chown command on an untrusted file within the sandbox. An attacker can abuse this by creating a symbolic link (symlink) to a file outside the sandbox, allowing the attacker to run chown on arbitrary files outside of the sandbox. This vulnerability is not impactful on it&#39;s own, but it can be used to bypass the patch for CVE-2024-28185 and obtain a complete sandbox escape. This vulnerability is fixed in 1.13.1.</p> <p>Judge0 is an open-source online code execution system. The application uses the UNIX chown command on an untrusted file within the sandbox. An attacker can abuse this by creating a symbolic link (symlink) to a file outside the sandbox, allowing the attacker to run chown on arbitrary files outside of the sandbox. This vulnerability is not impactful on it&#39;s own, but it can be used to bypass the patch for CVE-2024-28185 and obtain a complete sandbox escape. This vulnerability is fixed in 1.13.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-28189 https://cve.radiocsirt.org/vuln/gsd-2024-28189 gsd-2024-28189 https://cve.radiocsirt.org/vuln/gsd-2024-28189