https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:22:34 +0000 https://cve.radiocsirt.org/vuln/cve-2024-1485 <p><strong>Affected:</strong> registry-support, Red Hat OpenShift Developer Tools and Services, Red Hat OpenShift Container Platform 4</p> <p>A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. This could download a malicious archive and cause the cleanup process to overwrite or delete files outside of the archive, which should not be allowed.</p> <p><strong>Affected:</strong> registry-support, Red Hat OpenShift Developer Tools and Services, Red Hat OpenShift Container Platform 4</p> <p>A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. This could download a malicious archive and cause the cleanup process to overwrite or delete files outside of the archive, which should not be allowed.</p> https://cve.radiocsirt.org/vuln/cve-2024-1485