https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T23:47:57.658709+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-71111 EUVD-2026-71111 2026-10-21T23:47:57.661866+00:00 EUVD-2026-71111 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000167 fkie_cve-2018-1000167 2026-10-21T23:47:57.661897+00:00

OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can result in Remote Code Execution(even as root if suricata-update is called by root). This attack appears to be exploitable via a specially crafted yaml-file at https://www.openinfosecfoundation.org/rules/index.yaml. This vulnerability appears to have been fixed in 1.0.0b1.

 https://cve.radiocsirt.org/vuln/ghsa-7c4h-w765-6pwg GHSA-7c4h-w765-6pwg — OISF suricata-update unsafely deserializes YAML data 2026-10-21T23:47:57.661930+00:00

Affected: PyPI: suricata-update

Suricata-Update uses the insecure `yaml.load()` function. Code will be executed if the yaml-file contains lines like:

```yaml hello: !!python/object/apply:os.system ['ls -l > /tmp/output'] ```

The vulnerable function can be triggered by "suricata-update list-sources". The locally stored index.yaml will be loaded in this function and the malicious code gets executed.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000167 gsd-2018-1000167 2026-10-21T23:47:57.661957+00:00 gsd-2018-1000167 https://cve.radiocsirt.org/vuln/pysec-2018-75 PYSEC-2018-75 2026-10-21T23:47:57.661970+00:00

Affected: PyPI: suricata-update

OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can result in Remote Code Execution(even as root if suricata-update is called by root). This attack appears to be exploitable via a specially crafted yaml-file at https://www.openinfosecfoundation.org/rules/index.yaml. This vulnerability appears to have been fixed in 1.0.0b1.