https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 22:00:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-261421 EUVD-2026-261421 https://cve.radiocsirt.org/vuln/euvd-2026-261421 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6861 <p>A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product&#39;s API.</p> <p>A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product&#39;s API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6861 https://cve.radiocsirt.org/vuln/ghsa-q5h7-2qmh-rxhr <p>A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product&#39;s API.</p> <p>A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product&#39;s API.</p> https://cve.radiocsirt.org/vuln/ghsa-q5h7-2qmh-rxhr https://cve.radiocsirt.org/vuln/rhsa-2022:8506 <p>netty-codec: Bzip2Decoder doesn&#39;t allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn&#39;t restrict chunk length and may buffer skippable chunks in an unnecessary way django: Possible XSS via &#39;{% debug %}&#39; template tag nokogiri: ReDoS in HTML encoding detection ruby-git: package vulnerable to Command Injection via git argument injection rubygem-nokogiri: Improper Handling of Unexpected Data Type in Nokogiri sinatra: path traversal possible outside of public_dir when serving static files rubygem-rails-html-sanitizer: possible xss with certain configurations python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments foreman: foreman: OAuth secret exposure via unauthenticated access to the GraphQL API</p> <p>netty-codec: Bzip2Decoder doesn&#39;t allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn&#39;t restrict chunk length and may buffer skippable chunks in an unnecessary way django: Possible XSS via &#39;{% debug %}&#39; template tag nokogiri: ReDoS in HTML encoding detection ruby-git: package vulnerable to Command Injection via git argument injection rubygem-nokogiri: Improper Handling of Unexpected Data Type in Nokogiri sinatra: path traversal possible outside of public_dir when serving static files rubygem-rails-html-sanitizer: possible xss with certain configurations python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments foreman: foreman: OAuth secret exposure via unauthenticated access to the GraphQL API</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8506