https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:21:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-321938 EUVD-2026-321938 https://cve.radiocsirt.org/vuln/euvd-2026-321938 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41704 <p>AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response[&#39;value&#39;][&#39;result&#39;][&#39;compile_log_id&#39;] (line 332-338) and passes it to download_and_delete_blob. Separately, any response containing &#39;exception&#39; goes through format_exception (lines 308-325), which reads exception[&#39;blobstore_id&#39;] and also calls download_and_delete_blob. That helper (lines 344-349) calls ResourceManager#get_resource(blob_id) and, in an ensure block, ResourceManager#delete_resource(blob_id). ResourceManager (resource_manager.rb:62-70) calls blobstore.delete(id) on the single shared Director blobstore with no UUID-format check, no ownership check, and no namespace prefix.</p> <p>Affected versions: BOSH Director: All versions prior to v282.1.12</p> <p>AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response[&#39;value&#39;][&#39;result&#39;][&#39;compile_log_id&#39;] (line 332-338) and passes it to download_and_delete_blob. Separately, any response containing &#39;exception&#39; goes through format_exception (lines 308-325), which reads exception[&#39;blobstore_id&#39;] and also calls download_and_delete_blob. That helper (lines 344-349) calls ResourceManager#get_resource(blob_id) and, in an ensure block, ResourceManager#delete_resource(blob_id). ResourceManager (resource_manager.rb:62-70) calls blobstore.delete(id) on the single shared Director blobstore with no UUID-format check, no ownership check, and no namespace prefix.</p> <p>Affected versions: BOSH Director: All versions prior to v282.1.12</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41704 https://cve.radiocsirt.org/vuln/ghsa-mhvf-vxjh-cwwp <p>AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response[&#39;value&#39;][&#39;result&#39;][&#39;compile_log_id&#39;] (line 332-338) and passes it to download_and_delete_blob. Separately, any response containing &#39;exception&#39; goes through format_exception (lines 308-325), which reads exception[&#39;blobstore_id&#39;] and also calls download_and_delete_blob. That helper (lines 344-349) calls ResourceManager#get_resource(blob_id) and, in an ensure block, ResourceManager#delete_resource(blob_id). ResourceManager (resource_manager.rb:62-70) calls blobstore.delete(id) on the single shared Director blobstore with no UUID-format check, no ownership check, and no namespace prefix.</p> <p>Affected versions: BOSH Director: All versions prior to v282.1.12</p> <p>AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response[&#39;value&#39;][&#39;result&#39;][&#39;compile_log_id&#39;] (line 332-338) and passes it to download_and_delete_blob. Separately, any response containing &#39;exception&#39; goes through format_exception (lines 308-325), which reads exception[&#39;blobstore_id&#39;] and also calls download_and_delete_blob. That helper (lines 344-349) calls ResourceManager#get_resource(blob_id) and, in an ensure block, ResourceManager#delete_resource(blob_id). ResourceManager (resource_manager.rb:62-70) calls blobstore.delete(id) on the single shared Director blobstore with no UUID-format check, no ownership check, and no namespace prefix.</p> <p>Affected versions: BOSH Director: All versions prior to v282.1.12</p> https://cve.radiocsirt.org/vuln/ghsa-mhvf-vxjh-cwwp