Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 23:19:55 +0000 CVE-2026-32885 — DDEV has ZipSlip path traversal in tar and zip archive extraction https://cve.radiocsirt.org/vuln/cve-2026-32885 <p><strong>Affected:</strong> ddev</p> <p>DDEV is an open-source tool for running local web development environments for PHP and Node.js. Versions prior to 1.25.2 have unsanitized extraction in both `Untar()` and `Unzip()` functions in `pkg/archive/archive.go`. Downloads and extracts archives from remote sources without path validation. Version 1.25.2 patches the issue.</p> <p><strong>Affected:</strong> ddev</p> <p>DDEV is an open-source tool for running local web development environments for PHP and Node.js. Versions prior to 1.25.2 have unsanitized extraction in both `Untar()` and `Unzip()` functions in `pkg/archive/archive.go`. Downloads and extracts archives from remote sources without path validation. Version 1.25.2 patches the issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-32885