Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 04:48:11 +0000 EUVD-2026-374913 https://cve.radiocsirt.org/vuln/euvd-2026-374913 EUVD-2026-374913 https://cve.radiocsirt.org/vuln/euvd-2026-374913 fkie_cve-2026-75111 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75111 <p>Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system files, which are then materialized into datasets and retrieved through the download endpoint.</p> <p>Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system files, which are then materialized into datasets and retrieved through the download endpoint.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-75111 GHSA-cjrm-54c2-4w78 https://cve.radiocsirt.org/vuln/ghsa-cjrm-54c2-4w78 <p>Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system files, which are then materialized into datasets and retrieved through the download endpoint.</p> <p>Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system files, which are then materialized into datasets and retrieved through the download endpoint.</p> https://cve.radiocsirt.org/vuln/ghsa-cjrm-54c2-4w78