https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-12T10:59:31.722347+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-108723 fkie_cve-2026-108723 2026-10-12T10:59:31.747029+00:00

answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath() checks only path text without resolving symlinks. Attackers can ship a repository with a symlink pointing outside the checkout so am render embeds readable external files into generated HTML, disclosing them when shared.

 https://db.gcve.eu/vuln/ghsa-7v7j-pmcf-62v5 GHSA-7v7j-pmcf-62v5 2026-10-12T10:59:31.747170+00:00

answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath() checks only path text without resolving symlinks. Attackers can ship a repository with a symlink pointing outside the checkout so am render embeds readable external files into generated HTML, disclosing them when shared.