https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:26:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-267790 EUVD-2026-267790 https://cve.radiocsirt.org/vuln/euvd-2026-267790 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25057 <p>MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able to upload a zip file to create an assignment from an exported configuration (courses/&lt;:course_id&gt;/assignments/upload_config_files). The uploaded zip file entry names are used to create paths to write files to disk without checking these paths. This vulnerability is fixed in 2.9.1.</p> <p>MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able to upload a zip file to create an assignment from an exported configuration (courses/&lt;:course_id&gt;/assignments/upload_config_files). The uploaded zip file entry names are used to create paths to write files to disk without checking these paths. This vulnerability is fixed in 2.9.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-25057