https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:57:20 +0000 https://cve.radiocsirt.org/vuln/cve-2024-5926 <p><strong>Affected:</strong> stitionai/devika, stitionai devika</p> <p>A path traversal vulnerability in the get-project-files functionality of stitionai/devika allows attackers to read arbitrary files from the filesystem and cause a Denial of Service (DoS). This issue is present in all versions of the application. The vulnerability arises due to insufficient path sanitization for the &#39;project-name&#39; parameter, enabling attackers to specify paths that traverse the filesystem. By setting &#39;project-name&#39; to the root directory, an attacker can cause the application to attempt to read the entire filesystem, leading to a DoS condition.</p> <p><strong>Affected:</strong> stitionai/devika, stitionai devika</p> <p>A path traversal vulnerability in the get-project-files functionality of stitionai/devika allows attackers to read arbitrary files from the filesystem and cause a Denial of Service (DoS). This issue is present in all versions of the application. The vulnerability arises due to insufficient path sanitization for the &#39;project-name&#39; parameter, enabling attackers to specify paths that traverse the filesystem. By setting &#39;project-name&#39; to the root directory, an attacker can cause the application to attempt to read the entire filesystem, leading to a DoS condition.</p> https://cve.radiocsirt.org/vuln/cve-2024-5926