https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T16:49:37.689745+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109965 fkie_cve-2026-109965 2026-10-20T16:49:37.711098+00:00

Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.is_path_in_project() normalizes paths lexically without resolving symlinks, so file tools like read_file and create_text_file can read or overwrite files such as SSH keys or cloud credentials.

 https://db.gcve.eu/vuln/ghsa-f7x4-jgqg-5mc6 GHSA-f7x4-jgqg-5mc6 2026-10-20T16:49:37.711371+00:00

Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.is_path_in_project() normalizes paths lexically without resolving symlinks, so file tools like read_file and create_text_file can read or overwrite files such as SSH keys or cloud credentials.