https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:26:38.231276+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05423 bdu:2022-05423 2026-10-03T09:26:38.334003+00:00 bdu:2022-05423 https://cve.radiocsirt.org/vuln/certfr-2022-avi-924 certfr-2022-avi-924 — De multiples vulnérabilités ont été découvertes dans IBM QRadar. Certaines d'entre elles permettent à un attaquant de p… 2026-10-03T09:26:38.334045+00:00 certfr-2022-avi-924 https://cve.radiocsirt.org/vuln/euvd-2026-68173 EUVD-2026-68173 2026-10-03T09:26:38.334066+00:00 EUVD-2026-68173 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16487 fkie_cve-2018-16487 2026-10-03T09:26:38.334087+00:00

A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype.

 https://cve.radiocsirt.org/vuln/ghsa-4xc9-xhrj-v574 GHSA-4xc9-xhrj-v574 — Prototype Pollution in lodash 2026-10-03T09:26:38.334148+00:00

Affected: npm: lodash, RubyGems: lodash-rails

Versions of `lodash` before 4.17.11 are vulnerable to prototype pollution.

The vulnerable functions are 'defaultsDeep', 'merge', and 'mergeWith' which allow a malicious user to modify the prototype of `Object` via `{constructor: {prototype: {...}}}` causing the addition or modification of an existing property that will exist on all objects.

## Recommendation

Update to version 4.17.11 or later.

 https://cve.radiocsirt.org/vuln/gsd-2018-16487 gsd-2018-16487 2026-10-03T09:26:38.334179+00:00 gsd-2018-16487 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16487 UBUNTU-CVE-2018-16487 2026-10-03T09:26:38.334191+00:00

Affected: Ubuntu:Pro:16.04:LTS: node-lodash, Ubuntu:Pro:18.04:LTS: node-lodash

A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3307 WID-SEC-W-2026-3307 — IBM MQ Appliance (Axios Node.js): Mehrere Schwachstellen 2026-10-03T09:26:38.334211+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM MQ Appliance ausnutzen, um beliebigen Programmcode auszuführen, Server-Side Request Forgery (SSRF) durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder Denial-of-Service-Zustände herbeizuführen.