https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:28:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-3187 EUVD-2026-3187 https://cve.radiocsirt.org/vuln/euvd-2026-3187 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5926 <p>A path traversal vulnerability in the get-project-files functionality of stitionai/devika allows attackers to read arbitrary files from the filesystem and cause a Denial of Service (DoS). This issue is present in all versions of the application. The vulnerability arises due to insufficient path sanitization for the &#39;project-name&#39; parameter, enabling attackers to specify paths that traverse the filesystem. By setting &#39;project-name&#39; to the root directory, an attacker can cause the application to attempt to read the entire filesystem, leading to a DoS condition.</p> <p>A path traversal vulnerability in the get-project-files functionality of stitionai/devika allows attackers to read arbitrary files from the filesystem and cause a Denial of Service (DoS). This issue is present in all versions of the application. The vulnerability arises due to insufficient path sanitization for the &#39;project-name&#39; parameter, enabling attackers to specify paths that traverse the filesystem. By setting &#39;project-name&#39; to the root directory, an attacker can cause the application to attempt to read the entire filesystem, leading to a DoS condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-5926 https://cve.radiocsirt.org/vuln/ghsa-622m-gm3h-6w77 <p>Path Traversal: &#39;\..\filename&#39; in GitHub repository stitionai/devika prior to -.</p> <p>Path Traversal: &#39;\..\filename&#39; in GitHub repository stitionai/devika prior to -.</p> https://cve.radiocsirt.org/vuln/ghsa-622m-gm3h-6w77