https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 07:53:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-276249 EUVD-2026-276249 https://cve.radiocsirt.org/vuln/euvd-2026-276249 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4092 <p>Path Traversal in Clasp impacting versions &lt; 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences.</p> <p>Path Traversal in Clasp impacting versions &lt; 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4092 https://cve.radiocsirt.org/vuln/ghsa-hqjg-pww4-pcgq <p><strong>Affected:</strong> npm: @google/clasp</p> <p>### Impact Allows an attacker to perform a &#34;Path Traversal&#34; attack to modify files outside the projects directory, potentially allowing for running attacker code on the developer&#39;s machine.</p> <p>### Patches Fixed in version 3.2.0</p> <p>### Workarounds * Only clone or pull scripts from trusted sources * Review the output of the `pull` and `clone` commands to verify only expected project files are modified</p> <p><strong>Affected:</strong> npm: @google/clasp</p> <p>### Impact Allows an attacker to perform a &#34;Path Traversal&#34; attack to modify files outside the projects directory, potentially allowing for running attacker code on the developer&#39;s machine.</p> <p>### Patches Fixed in version 3.2.0</p> <p>### Workarounds * Only clone or pull scripts from trusted sources * Review the output of the `pull` and `clone` commands to verify only expected project files are modified</p> https://cve.radiocsirt.org/vuln/ghsa-hqjg-pww4-pcgq