https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T17:03:08.687704+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-103591 CVE-2026-103591 — DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file 2026-10-01T17:03:08.689547+00:00

Affected: AsyncFuncAI deepwiki-open

DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repo_url parameter. Attackers can supply a non-URL repo_url value to bypass path containment checks and read any file accessible to the API process by specifying absolute file paths.