https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:02:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-308099 EUVD-2026-308099 https://cve.radiocsirt.org/vuln/euvd-2026-308099 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13030 <p>All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file names.</p> <p>All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file names.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-13030 https://cve.radiocsirt.org/vuln/ghsa-qp2c-xqv6-phh6 <p><strong>Affected:</strong> PyPI: django-mdeditor</p> <p>All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file names.</p> <p><strong>Affected:</strong> PyPI: django-mdeditor</p> <p>All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file names.</p> https://cve.radiocsirt.org/vuln/ghsa-qp2c-xqv6-phh6 https://cve.radiocsirt.org/vuln/pysec-2026-2450 <p><strong>Affected:</strong> PyPI: django-mdeditor</p> <p>All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file names.</p> <p><strong>Affected:</strong> PyPI: django-mdeditor</p> <p>All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file names.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2450