https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T21:45:10.497034+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2017-16355 CVE-2017-16355 2026-10-02T21:45:10.513926+00:00

In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root folder to a file of choice and querying passenger-status --show=xml.

 https://db.gcve.eu/vuln/usn-5261-1 USN-5261-1 — passenger vulnerabilities 2026-10-02T21:45:10.514038+00:00

Affected: Ubuntu:Pro:16.04:LTS: passenger

It was discovered that Phusion Passenger incorrectly handled a file path in the application root folder. An attacker could possibly use this issue to read arbitrary files. (CVE-2017-16355)

It was discovered that Phusion Passenger had a race condition in the nginx module that could be used to perform a symlink attack. An attacker could possibly use this issue to escalate privileges. (CVE-2018-12029)