https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 11:51:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-2969 EUVD-2026-2969 https://cve.radiocsirt.org/vuln/euvd-2026-2969 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5334 <p>A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the &#39;snapshot_path&#39; parameter in the &#39;/api/get-browser-snapshot&#39; endpoint. An attacker can exploit this vulnerability by crafting a request with a malicious &#39;snapshot_path&#39; parameter, leading to arbitrary file read from the system. This issue impacts the security of the application by allowing unauthorized access to sensitive files on the server.</p> <p>A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the &#39;snapshot_path&#39; parameter in the &#39;/api/get-browser-snapshot&#39; endpoint. An attacker can exploit this vulnerability by crafting a request with a malicious &#39;snapshot_path&#39; parameter, leading to arbitrary file read from the system. This issue impacts the security of the application by allowing unauthorized access to sensitive files on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-5334 https://cve.radiocsirt.org/vuln/ghsa-p7qc-844f-652r <p>External Control of File Name or Path in GitHub repository stitionai/devika prior to -.</p> <p>External Control of File Name or Path in GitHub repository stitionai/devika prior to -.</p> https://cve.radiocsirt.org/vuln/ghsa-p7qc-844f-652r