https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 02:31:58 +0000 https://vulnerability.circl.lu/vuln/cve-2023-38633 <p>A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=&#34;.?../../../../../../../../../../etc/passwd&#34; in an xi:include element.</p> <p>A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=&#34;.?../../../../../../../../../../etc/passwd&#34; in an xi:include element.</p> https://vulnerability.circl.lu/vuln/cve-2023-38633 https://vulnerability.circl.lu/vuln/usn-6266-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: librsvg, Ubuntu:22.04:LTS: librsvg</p> <p>Zac Sims discovered that librsvg incorrectly handled decoding URLs. A remote attacker could possibly use this issue to read arbitrary files by using an include element.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: librsvg, Ubuntu:22.04:LTS: librsvg</p> <p>Zac Sims discovered that librsvg incorrectly handled decoding URLs. A remote attacker could possibly use this issue to read arbitrary files by using an include element.</p> https://vulnerability.circl.lu/vuln/usn-6266-1