https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 22:42:18 +0000 https://db.gcve.eu/vuln/brew-adr-viewer-cve-2026-115355 <p><strong>Affected:</strong> Homebrew: adr-viewer</p> <p>The Include directive in `src/mistune/directives/include.py` does not validate that the resolved file path stays within the source directory, allowing path traversal via `../` sequences to read arbitrary files.</p> <p>Additionally, error messages and included file contents are rendered without HTML escaping, leading to XSS even when `escape=True`.</p> <p>Affected functions: - Path resolution (lines 27-31) - `block_error()` in html.py (line 140) - `render_html_include()` (line 72)</p> <p>The Include plugin must be explicitly enabled via the plugins parameter.</p> <p><strong>Affected:</strong> Homebrew: adr-viewer</p> <p>The Include directive in `src/mistune/directives/include.py` does not validate that the resolved file path stays within the source directory, allowing path traversal via `../` sequences to read arbitrary files.</p> <p>Additionally, error messages and included file contents are rendered without HTML escaping, leading to XSS even when `escape=True`.</p> <p>Affected functions: - Path resolution (lines 27-31) - `block_error()` in html.py (line 140) - `render_html_include()` (line 72)</p> <p>The Include plugin must be explicitly enabled via the plugins parameter.</p> https://db.gcve.eu/vuln/brew-adr-viewer-cve-2026-115355 https://db.gcve.eu/vuln/cve-2026-115355 <p><strong>Affected:</strong> lepture mistune</p> <p>Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read arbitrary files by supplying ../ sequences in include paths. Attackers can also inject HTML through unescaped error messages and included file contents to perform cross-site scripting even when escape=True is set.</p> <p><strong>Affected:</strong> lepture mistune</p> <p>Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read arbitrary files by supplying ../ sequences in include paths. Attackers can also inject HTML through unescaped error messages and included file contents to perform cross-site scripting even when escape=True is set.</p> https://db.gcve.eu/vuln/cve-2026-115355