https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:15:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-352172 EUVD-2026-352172 https://cve.radiocsirt.org/vuln/euvd-2026-352172 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18749 <p>The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shared is still retrievable by any case member who has (or is sent) its uuid — leaks not-yet-released coordinator material to vendors on the case.</p> <p>The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shared is still retrievable by any case member who has (or is sent) its uuid — leaks not-yet-released coordinator material to vendors on the case.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18749 https://cve.radiocsirt.org/vuln/ghsa-fmgm-gh7c-hwv2 <p>The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shared is still retrievable by any case member who has (or is sent) its uuid — leaks not-yet-released coordinator material to vendors on the case.</p> <p>The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shared is still retrievable by any case member who has (or is sent) its uuid — leaks not-yet-released coordinator material to vendors on the case.</p> https://cve.radiocsirt.org/vuln/ghsa-fmgm-gh7c-hwv2