CVE-2026-27140

CVE-2026-27140 affects Go toolchain components (Go golang and related tooling) via SWIG file name handling. The issue arises when SWIG file names containing 'cgo' enable code smuggling and arbitrary code execution at build time due to a trust-layer bypass. Connected advisories (Red Hat RHSA advis...

GO-2026-4871 Code execution vulnerability in SWIG code generation in cmd/go

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

PT-2026-31058

Name of the Vulnerable Software and Affected Versions SWIG affected versions not specified Description SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass. Recommendations At the moment, there...

CVE-2023-25344

An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function...

CVE-2023-25345

Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags...

EUVD-2023-0832

Malicious code in bioql PyPI...

EUVD-2023-29303

Malicious code in bioql PyPI...

Fedora 41 : subversion (2024-93e88b1c0d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-93e88b1c0d advisory. This release contains a fix for a security issue: CVE-2024-46901 See https://subversion.apache.org/security/CVE-2024-46901-advisory.txt for more...

Path Traversal

swig-templates is vulnerable to Path Traversal. The vulnerability exists due to improper template restrictions which allows an attacker to access and read the files outside the restricted directory through the include or extends tags...

Arbitrary Code Execution

swig is vulnerable to Arbitrary Code Execution. The vulnerability is due to a lack of template restrictions; if an attacker has access to the template file, they can inject and execute malicious code through a maliciously crafted Object.prototype anonymous function...

1095h-cli (1.0.1), 5coder-pages (0.2.0) +547 more potentially affected by CVE-2023-25345 via swig-templates (>=2.0.2, <=2.0.3)

swig-templates NPM version =2.0.2, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0-beta.1, =0.0.1-alpha.0, =0.0.1 and more Source cves: CVE-2023-25345 Source advisory: OSV:GHSA-2RQ5-699J-X7P6...

GHSA-2RQ5-699J-X7P6 Arbitrary local file read vulnerability during template rendering

Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags...

08cms (1.0.0), @27works/posto (2.0.2) +1007 more potentially affected by CVE-2023-25345 via swig (>=1.0.0, <=1.4.2)

swig NPM version =1.0.0, =1.0.0, =1.4.41, =0.0.11, =0.1.0, =0.1.0, =0.1.16-master.20181116180810, =0.0.6, =1.0.0, =1.0.0, =1.0.0, =1.2.1 and more Source cves: CVE-2023-25345 Source advisory: OSV:GHSA-2RQ5-699J-X7P6...

Arbitrary local file read vulnerability during template rendering

Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags...

CVE-2023-25344

An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function...

CVE-2023-25345

Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags...

Directory traversal

Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags...

PT-2023-20030 · Swig +1 · Swig +1

Name of the Vulnerable Software and Affected Versions: swig-templates versions 2.0.4 and earlier swig versions 1.4.2 and earlier Description: A directory traversal issue allows attackers to read arbitrary files via the include or extends tags. This can be exploited by attackers to access sensitiv...

swig 路径遍历漏洞

swig is a JavaScript template engine open-sourced by node-swig. A security vulnerability exists in swig swig-templates thru version 2.0.4 and swig thru version 1.4.2, which could allow an attacker to read arbitrary files via the include or extends tags...

PT-2023-20029 · Swig +1 · Swig +1

Name of the Vulnerable Software and Affected Versions: swig-templates versions 2.0.4 and earlier swig versions 1.4.2 and earlier Description: An issue allows attackers to execute arbitrary code via crafted Object.prototype anonymous function. Recommendations: For swig-templates versions 2.0.4 and...