Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:19:56 +0000 certfr-2026-avi-0646 — Une vulnérabilité a été découverte dans Spring AI. Elle permet à un attaquant de provoquer une atteinte à l'intégrité d… https://cve.radiocsirt.org/vuln/certfr-2026-avi-0646 certfr-2026-avi-0646 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0646 EUVD-2026-321355 https://cve.radiocsirt.org/vuln/euvd-2026-321355 EUVD-2026-321355 https://cve.radiocsirt.org/vuln/euvd-2026-321355 fkie_cve-2026-41863 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41863 <p>Spring AI&#39;s support for Anthropic&#39;s Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories.</p> <p>Affected versions: Spring AI: 1.1.0 through 1.1.x</p> <p>Spring AI&#39;s support for Anthropic&#39;s Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories.</p> <p>Affected versions: Spring AI: 1.1.0 through 1.1.x</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41863 GHSA-cc4m-mp48-x7qg — Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing… https://cve.radiocsirt.org/vuln/ghsa-cc4m-mp48-x7qg <p><strong>Affected:</strong> Maven: org.springframework.ai:spring-ai-anthropic</p> <p>Spring AI&#39;s support for Anthropic&#39;s Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories.</p> <p>Affected versions: Spring AI: 1.1.0 through 1.1.7</p> <p><strong>Affected:</strong> Maven: org.springframework.ai:spring-ai-anthropic</p> <p>Spring AI&#39;s support for Anthropic&#39;s Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories.</p> <p>Affected versions: Spring AI: 1.1.0 through 1.1.7</p> https://cve.radiocsirt.org/vuln/ghsa-cc4m-mp48-x7qg