https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 12:40:05 +0000 https://cve.radiocsirt.org/vuln/cve-2025-6278 <p><strong>Affected:</strong> Upsonic</p> <p>A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used.</p> <p><strong>Affected:</strong> Upsonic</p> <p>A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/cve-2025-6278 https://cve.radiocsirt.org/vuln/ghsa-8jf4-fcjr-68c2 <p><strong>Affected:</strong> PyPI: upsonic</p> <p>A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used.</p> <p><strong>Affected:</strong> PyPI: upsonic</p> <p>A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/ghsa-8jf4-fcjr-68c2