https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T08:06:42.950675+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-108694 CVE-2026-108694 — ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter 2026-10-17T08:06:42.951606+00:00

Affected: C4illin ConvertX

ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.