https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:15:28 +0000 https://cve.radiocsirt.org/vuln/cve-2026-15392 <p><strong>Affected:</strong> HMBRAND DBD::File</p> <p>DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.</p> <p>The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories.</p> <p>Callers of file-based drivers can read or write files outside of the data directory.</p> <p><strong>Affected:</strong> HMBRAND DBD::File</p> <p>DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.</p> <p>The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories.</p> <p>Callers of file-based drivers can read or write files outside of the data directory.</p> https://cve.radiocsirt.org/vuln/cve-2026-15392