CVE-2007-2726: Bitscast

High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days.

BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A" or "A/../" patterns.

Affected products

• Bitscast Bitscast: version 0.13.0 only

Published 2007-05-16. Last modified 2026-06-16.