https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:53:13.323020+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4807 ALSA-2020:4807 — Moderate: prometheus-jmx-exporter security update 2026-10-02T13:53:13.621525+00:00

Affected: AlmaLinux:8: prometheus-jmx-exporter

Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target.

Security Fix(es):

* snakeyaml: Billion laughs attack via alias feature (CVE-2017-18640)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-02625 bdu:2021-02625 2026-10-02T13:53:13.621587+00:00 bdu:2021-02625 https://cve.radiocsirt.org/vuln/certfr-2022-avi-266 certfr-2022-avi-266 — De multiples vulnérabilités ont été découvertes dans IBM WebSphere Service Registry and Repository. Certaines d'entre e… 2026-10-02T13:53:13.621604+00:00 certfr-2022-avi-266 https://cve.radiocsirt.org/vuln/cnvd-2020-22682 cnvd-2020-22682 2026-10-02T13:53:13.621620+00:00 cnvd-2020-22682 https://cve.radiocsirt.org/vuln/euvd-2026-80393 EUVD-2026-80393 2026-10-02T13:53:13.621631+00:00 EUVD-2026-80393 https://cve.radiocsirt.org/vuln/fkie_cve-2017-18640 fkie_cve-2017-18640 2026-10-02T13:53:13.621641+00:00

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

 https://cve.radiocsirt.org/vuln/ghsa-rvwf-54qp-4r6v GHSA-rvwf-54qp-4r6v — SnakeYAML Entity Expansion during load operation 2026-10-02T13:53:13.621661+00:00

Affected: Maven: org.yaml:snakeyaml

The Alias feature in SnakeYAML 1.18 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

 https://cve.radiocsirt.org/vuln/gsd-2017-18640 gsd-2017-18640 2026-10-02T13:53:13.621679+00:00 gsd-2017-18640 https://cve.radiocsirt.org/vuln/jvndb-2022-000062 jvndb-2022-000062 2026-10-02T13:53:13.621689+00:00

Kaitai Struct: compiler provided by Kaitai team contains SnakeYAML library version 1.25, which is used in parsing .ksy files. SnakeYAML version 1.25 expands recursive aliases unlimitedly (CWE-674), hence Katai Struct: compiler is vulnerable to a denial-of-service (DoS) attack by Billion Laughs Attack. Taichi Kotake of Sterra Security Co.,Ltd. / Akatsuki Games Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/msrc_cve-2017-18640 msrc_CVE-2017-18640 — The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003… 2026-10-02T13:53:13.621706+00:00 msrc_CVE-2017-18640 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0855-1 openSUSE-SU-2021:0855-1 — Security update for snakeyaml 2026-10-02T13:53:13.621722+00:00

Security update for snakeyaml

 https://cve.radiocsirt.org/vuln/rhsa-2020:2603 RHSA-2020:2603 — Red Hat Security Advisory: Red Hat build of Quarkus 1.3.4 security update 2026-10-02T13:53:13.621736+00:00

snakeyaml: Billion laughs attack via alias feature

 https://cve.radiocsirt.org/vuln/suse-su-2021:1876-1 SUSE-SU-2021:1876-1 — Security update for snakeyaml 2026-10-02T13:53:13.621750+00:00

Security update for snakeyaml

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-18640 UBUNTU-CVE-2017-18640 2026-10-02T13:53:13.621763+00:00

Affected: Ubuntu:Pro:14.04:LTS: snakeyaml, Ubuntu:Pro:16.04:LTS: snakeyaml, Ubuntu:Pro:18.04:LTS: snakeyaml, Ubuntu:Pro:20.04:LTS: snakeyaml

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 WID-SEC-W-2022-0770 — IBM DB2: Mehrere Schwachstellen 2026-10-02T13:53:13.621784+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen