GHSA-2gq2-m628-33xp
gregwar/rst Local File Inclusion Vulnerability
A Local File Inclusion (LFI) vulnerability has been discovered in the gregwar/rst library, potentially exposing sensitive files on the server to unauthorized users. The issue arises from inadequate input validation, allowing an attacker to manipulate file paths and include arbitrary files.
What each source reports
GitHub Advisories No score
gregwar/rst Local File Inclusion Vulnerability
A Local File Inclusion (LFI) vulnerability has been discovered in the gregwar/rst library, potentially exposing sensitive files on the server to unauthorized users. The issue arises from inadequate input validation, allowing an attacker to manipulate file paths and include arbitrary files.
- Record
GHSA-2gq2-m628-33xp- Updated
- 2026-11-02
OSV No score
gregwar/rst Local File Inclusion Vulnerability
A Local File Inclusion (LFI) vulnerability has been discovered in the gregwar/rst library, potentially exposing sensitive files on the server to unauthorized users. The issue arises from inadequate input validation, allowing an attacker to manipulate file paths and include arbitrary files.
- Record
GHSA-2gq2-m628-33xp- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gregwar/rstPackagist |
before 1.0.3 | 1.0.3 |
gregwar/rstPackagist |
before 1.0.3, plus listed versions v1.0.0v1.0.1v1.0.2 |
1.0.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-2gq2-m628-33xp is a vulnerability with no CVSS score yet in gregwar/rst, published May 15, 2024. No source lists public exploit code. Fixed in gregwar/rst 1.0.3.