https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:10:10.065389+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-02845 bdu:2021-02845 2026-10-02T21:10:10.179963+00:00 bdu:2021-02845 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1233 certfr-2026-avi-1233 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T21:10:10.180002+00:00 certfr-2026-avi-1233 https://cve.radiocsirt.org/vuln/cnvd-2021-28362 cnvd-2021-28362 2026-10-02T21:10:10.180023+00:00 cnvd-2021-28362 https://cve.radiocsirt.org/vuln/euvd-2026-262082 EUVD-2026-262082 2026-10-02T21:10:10.180037+00:00 EUVD-2026-262082 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1109 fkie_cve-2018-1109 2026-10-02T21:10:10.180049+00:00

A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-cwfw-4gq5-mrqx GHSA-cwfw-4gq5-mrqx — Regular Expression Denial of Service (ReDoS) in braces 2026-10-02T21:10:10.180077+00:00

Affected: npm: braces

A vulnerability was found in Braces versions from v2.2.0 up to but not including v2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks. This has been patched in version 2.3.1.

 https://cve.radiocsirt.org/vuln/gsd-2018-1109 gsd-2018-1109 2026-10-02T21:10:10.180101+00:00 gsd-2018-1109 https://cve.radiocsirt.org/vuln/rhsa-2021:3917 RHSA-2021:3917 — Red Hat Security Advisory: Red Hat Quay v3.6.0 security, bug fix and enhancement update 2026-10-02T21:10:10.180113+00:00

nodejs-debug: Regular expression Denial of Service nodejs-mime: Regular expression Denial of Service nodejs-is-my-json-valid: ReDoS when validating JSON fields with email format nodejs-braces: Regular Expression Denial of Service (ReDoS) in lib/parsers.js lodash: Prototype pollution in utilities function hoek: Prototype pollution in utilities function nodejs-url-parse: incorrect hostname in url parsing nodejs-extend: Prototype pollution can allow attackers to modify object properties nodejs-stringstream: out-of-bounds read leading to uninitialized memory exposure nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS lodash: uncontrolled resource consumption in Data handler causing denial of service nodejs-yargs-parser: prototype pollution vulnerability nodejs-lodash: prototype pollution in zipObjectDeep function nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function nodejs-highlight-js: prototype pollution via a crafted HTML code block urijs: Hostname spoofing via backslashes in URL python-pillow: Buffer over-read in PCX image reader python-pillow: decoding crafted YCbCr files could result in heap-based buffer overflow browserslist: parsing of invalid queries could result in Regular Expression Denial of Service (ReDoS) nodejs-postcss: Regular expression denial of service during source map parsing no…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1109 Withdrawn: UBUNTU-CVE-2018-1109 2026-10-02T21:10:10.180194+00:00

Withdrawn by the publisher.

Affected: Ubuntu:20.04:LTS: node-braces

A vulnerability was found in Braces versions prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.