https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T00:40:19.986643+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-38633 CVE-2023-38633 2026-10-08T00:40:20.699401+00:00

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

 https://vulnerability.circl.lu/vuln/usn-6266-1 USN-6266-1 — librsvg vulnerability 2026-10-08T00:40:20.699531+00:00

Affected: Ubuntu:20.04:LTS: librsvg, Ubuntu:22.04:LTS: librsvg

Zac Sims discovered that librsvg incorrectly handled decoding URLs. A remote attacker could possibly use this issue to read arbitrary files by using an include element.