https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T18:34:49.465743+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-17T18:34:49.470605+00:00 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-183564 EUVD-2026-183564 2026-10-17T18:34:49.470641+00:00 EUVD-2026-183564 https://cve.radiocsirt.org/vuln/fkie_cve-2018-15798 fkie_cve-2018-15798 2026-10-17T18:34:49.470656+00:00

Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a user to click on a link using the oAuth redirect link with an untrusted website and gain access to that user's access token in Concourse.

 https://cve.radiocsirt.org/vuln/ghsa-9689-rx4v-cqgc GHSA-9689-rx4v-cqgc — Pivotal Concourse Open Redirect in Login Flow 2026-10-17T18:34:49.470684+00:00

Affected: Go: github.com/concourse/concourse

Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a user to click on a link using the oAuth redirect link with an untrusted website and gain access to that user's access token in Concourse.

### Specific Go Packages Affected github.com/concourse/concourse/skymarshal/skyserver

 https://cve.radiocsirt.org/vuln/gsd-2018-15798 gsd-2018-15798 2026-10-17T18:34:49.470710+00:00 gsd-2018-15798