https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 08:06:39 +0000 https://db.gcve.eu/vuln/cve-2026-108694 <p><strong>Affected:</strong> C4illin ConvertX</p> <p>ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file&#39;s contents.</p> <p><strong>Affected:</strong> C4illin ConvertX</p> <p>ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file&#39;s contents.</p> https://db.gcve.eu/vuln/cve-2026-108694