https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-04T05:29:43.792950+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-74884 fkie_cve-2026-74884 2026-10-04T05:29:43.821043+00:00

openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the _is_safe_path method where the plugin_id parameter is not sanitized before constructing the plugin config directory path. Attackers can declare a malicious plugin_id containing path traversal sequences like '../' to access arbitrary directories outside the intended plugin directory.

 https://db.gcve.eu/vuln/ghsa-4hf6-j482-f379 GHSA-4hf6-j482-f379 2026-10-04T05:29:43.821116+00:00

openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the _is_safe_path method where the plugin_id parameter is not sanitized before constructing the plugin config directory path. Attackers can declare a malicious plugin_id containing path traversal sequences like '../' to access arbitrary directories outside the intended plugin directory.

 https://db.gcve.eu/vuln/pysec-2026-3761 PYSEC-2026-3761 2026-10-04T05:29:43.821136+00:00

Affected: PyPI: openssl-encrypt

openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the _is_safe_path method where the plugin_id parameter is not sanitized before constructing the plugin config directory path. Attackers can declare a malicious plugin_id containing path traversal sequences like '../' to access arbitrary directories outside the intended plugin directory.