https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 20:44:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-223456 EUVD-2026-223456 https://cve.radiocsirt.org/vuln/euvd-2026-223456 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47049 <p>The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.</p> <p>The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47049 https://cve.radiocsirt.org/vuln/ghsa-6rgh-r6j3-3223 <p><strong>Affected:</strong> Packagist: czim/file-handling</p> <p>The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.</p> <p><strong>Affected:</strong> Packagist: czim/file-handling</p> <p>The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.</p> https://cve.radiocsirt.org/vuln/ghsa-6rgh-r6j3-3223