https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 05:57:41 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11569 <p>Rejected reason: This record was withdrawn by its CNA; further investigation revealed it was not a security issue.</p> <p>Rejected reason: This record was withdrawn by its CNA; further investigation revealed it was not a security issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11569 https://cve.radiocsirt.org/vuln/ghsa-gj5f-73vh-wpf7 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> npm: cross-zip</p> <p>### Withdrawn Advisory This advisory has been withdrawn because it does not discuss a valid vulnerability. This link is maintained to preserve external references.</p> <p>### Original Description All versions of the package cross-zip are vulnerable to Directory Traversal via consecutive usage of zipSync() and unzipSync () functions that allow arguments such as __dirname. An attacker can access system files by selectively doing zip/unzip operations.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> npm: cross-zip</p> <p>### Withdrawn Advisory This advisory has been withdrawn because it does not discuss a valid vulnerability. This link is maintained to preserve external references.</p> <p>### Original Description All versions of the package cross-zip are vulnerable to Directory Traversal via consecutive usage of zipSync() and unzipSync () functions that allow arguments such as __dirname. An attacker can access system files by selectively doing zip/unzip operations.</p> https://cve.radiocsirt.org/vuln/ghsa-gj5f-73vh-wpf7