Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:24:54 +0000 EUVD-2026-319687 https://cve.radiocsirt.org/vuln/euvd-2026-319687 EUVD-2026-319687 https://cve.radiocsirt.org/vuln/euvd-2026-319687 fkie_cve-2026-34754 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34754 <p>Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2.</p> <p>Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34754 GHSA-h4x5-gvx6-3rwc — MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST API https://cve.radiocsirt.org/vuln/ghsa-h4x5-gvx6-3rwc <p><strong>Affected:</strong> Packagist: mantisbt/mantisbt</p> <p>### Impact MantisBT allows an authenticated user to upload attachments to private Issues they are not authorized to access.</p> <p>### Patches - b262b4d2835b81394d75356dead66e52a6275206</p> <p>### Workarounds None.</p> <p>### Credits Thanks to Vishal Shukla for discovering and responsibly reporting the issue.</p> <p><strong>Affected:</strong> Packagist: mantisbt/mantisbt</p> <p>### Impact MantisBT allows an authenticated user to upload attachments to private Issues they are not authorized to access.</p> <p>### Patches - b262b4d2835b81394d75356dead66e52a6275206</p> <p>### Workarounds None.</p> <p>### Credits Thanks to Vishal Shukla for discovering and responsibly reporting the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-h4x5-gvx6-3rwc