https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:18:51.510846+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-01847 bdu:2020-01847 2026-10-02T17:18:51.573943+00:00 bdu:2020-01847 https://cve.radiocsirt.org/vuln/euvd-2026-55559 EUVD-2026-55559 2026-10-02T17:18:51.573985+00:00 EUVD-2026-55559 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13173 fkie_cve-2019-13173 2026-10-02T17:18:51.574000+00:00

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.

 https://cve.radiocsirt.org/vuln/ghsa-xf7w-r453-m56c GHSA-xf7w-r453-m56c — Arbitrary File Overwrite in fstream 2026-10-02T17:18:51.574036+00:00

Affected: npm: fstream

Versions of `fstream` prior to 1.0.12 are vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system and a file that matches the hardlink will overwrite the system's file with the contents of the extracted file. The `fstream.DirWriter()` function is vulnerable.

## Recommendation

Upgrade to version 1.0.12 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-13173 gsd-2019-13173 2026-10-02T17:18:51.574064+00:00 gsd-2019-13173 https://cve.radiocsirt.org/vuln/oesa-2022-1584 OESA-2022-1584 — nodejs-fstream security update 2026-10-02T17:18:51.574076+00:00

Affected: openEuler:20.03-LTS-SP1: nodejs-fstream, openEuler:20.03-LTS-SP2: nodejs-fstream, openEuler:20.03-LTS-SP3: nodejs-fstream

Provides advanced file system stream objects for Node.js. These objects are like FS streams, but with stat on them, and support directories and symbolic links, as well as normal files. Also, you can use them to set the stats on a file, even if you don't change its contents, or to create a symlink, etc. Security Fix(es): fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.(CVE-2019-13173)

 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1846-1 openSUSE-SU-2019:1846-1 — Security update for nodejs10 2026-10-02T17:18:51.574105+00:00

Security update for nodejs10

 https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 SUSE-SU-2019:14246-1 — Security update for Mozilla Firefox 2026-10-02T17:18:51.574122+00:00

Security update for Mozilla Firefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13173 UBUNTU-CVE-2019-13173 2026-10-02T17:18:51.574208+00:00

Affected: Ubuntu:Pro:14.04:LTS: node-fstream, Ubuntu:Pro:16.04:LTS: node-fstream, Ubuntu:18.04:LTS: node-fstream

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.