PT-2026-39164

Insecure Deserialization in File Cache - Severity: High - CWE: CWE-502 - Location: system/src/Grav/Framework/Cache/Adapter/FileCache.php - Sink: unserialize$value, 'allowed classes' = true Affected versions - Affected: = 1.7.44 and true allows object instantiation and does not constrain classes...

EUVD-2017-0354

Malware in sbrugna...

RuboCop Arbitrary Cache File Modification Vulnerability

RuboCop is a Ruby static code analyzer . With the ability to find and resolve code errors. A security vulnerability exists in RuboCop 0.48.1 and earlier versions. A local attacker can exploit the vulnerability to tamper with other users' cached files...

CVE-2017-8418: Exposure of Resource to Wrong Sphere

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users...