PyPI/radicale CVE-2016-1505: critical 10, EPSS 2.61%

Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component

Action: Upgrade radicale to 1.1 or later.

pip install radicale==1.1

Affected

Fixed versions

Sources

• osv: GHSA-84cw-mxhv-qvv4
• https://nvd.nist.gov/vuln/detail/CVE-2016-1505
• https://github.com/Kozea/Radicale/pull/343
• https://github.com/Kozea/Radicale/commit/b4b3d51f33c7623d312f289252dd7bbb8f58bbe6
• https://github.com/Kozea/Radicale
• http://www.openwall.com/lists/oss-security/2016/01/05/7
• http://www.openwall.com/lists/oss-security/2016/01/06/4
• http://www.openwall.com/lists/oss-security/2016/01/06/7
• http://www.openwall.com/lists/oss-security/2016/01/07/7
• http://www.securityfocus.com/bid/80255

CVE-2016-1505 · published 2022-05-17T03:43:03Z · modified 2026-06-29T12:26:21.176996657Z · JSON