https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:14:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-247623 EUVD-2026-247623 https://cve.radiocsirt.org/vuln/euvd-2026-247623 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53833 <p>LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection (SSTI), which could potentially lead to Remote Code Execution (RCE) in vulnerable configurations. Attackers could execute arbitrary commands on the server, access sensitive environment variables, and/or escalate access depending on server configuration. Users are strongly advised to upgrade to version v2.8.1 or later to receive a patch.</p> <p>LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection (SSTI), which could potentially lead to Remote Code Execution (RCE) in vulnerable configurations. Attackers could execute arbitrary commands on the server, access sensitive environment variables, and/or escalate access depending on server configuration. Users are strongly advised to upgrade to version v2.8.1 or later to receive a patch.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53833 https://cve.radiocsirt.org/vuln/ghsa-jv7x-xhv2-p5v2 <p><strong>Affected:</strong> Packagist: binarytorch/larecipe</p> <p>### Impact Attackers could: 1. Execute arbitrary commands on the server 2. Access sensitive environment variables 3. Escalate access depending on server configuration</p> <p>A critical vulnerability was discovered in LaRecipe that allows an attacker to perform Server-Side Template Injection (SSTI), potentially leading to Remote Code Execution (RCE) in vulnerable configurations.</p> <p>### Patches Users are strongly advised to upgrade to version v2.8.1 or later.</p> <p>### Credit We would like to thank **Roman Ananev** for responsibly identifying and reporting this vulnerability.</p> <p><strong>Affected:</strong> Packagist: binarytorch/larecipe</p> <p>### Impact Attackers could: 1. Execute arbitrary commands on the server 2. Access sensitive environment variables 3. Escalate access depending on server configuration</p> <p>A critical vulnerability was discovered in LaRecipe that allows an attacker to perform Server-Side Template Injection (SSTI), potentially leading to Remote Code Execution (RCE) in vulnerable configurations.</p> <p>### Patches Users are strongly advised to upgrade to version v2.8.1 or later.</p> <p>### Credit We would like to thank **Roman Ananev** for responsibly identifying and reporting this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-jv7x-xhv2-p5v2