Oxidized Web vulnerabilities

1 known vulnerability in Oxidized Web from Oxidized Web project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Oxidized Web: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-27590Mar 3, 2025Oxidized Web projectEPSS 27.6%

  In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.