Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 02:00:35 +0000 CVE-2026-42448 — wormhole receive, with --output pointing at an existing directory can be path-traversed https://vulnerability.circl.lu/vuln/cve-2026-42448 <p><strong>Affected:</strong> magic-wormhole</p> <p>Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. Prior to 0.24.0, there is a path traversal when a receiver who specifies &#34;--output &lt;dir&gt;&#34; where that output directory currently exists (as a directory). This vulnerability is fixed in 0.24.0.</p> <p><strong>Affected:</strong> magic-wormhole</p> <p>Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. Prior to 0.24.0, there is a path traversal when a receiver who specifies &#34;--output &lt;dir&gt;&#34; where that output directory currently exists (as a directory). This vulnerability is fixed in 0.24.0.</p> https://vulnerability.circl.lu/vuln/cve-2026-42448