https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T14:45:43.966698+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-102811 fkie_cve-2026-102811 2026-10-01T14:45:43.990133+00:00

Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Attackers can exploit unsanitized path parameters in handle_create_content and handle_clone_content to write files outside the project directory via directory traversal.

 https://vulnerability.circl.lu/vuln/ghsa-j4pw-7rqh-x2mj GHSA-j4pw-7rqh-x2mj 2026-10-01T14:45:43.990237+00:00

Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Attackers can exploit unsanitized path parameters in handle_create_content and handle_clone_content to write files outside the project directory via directory traversal.