https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:44:14.565091+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-03728 cnvd-2020-03728 2026-10-03T05:44:14.695442+00:00 cnvd-2020-03728 https://cve.radiocsirt.org/vuln/euvd-2026-58012 EUVD-2026-58012 2026-10-03T05:44:14.695479+00:00 EUVD-2026-58012 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16779 fkie_cve-2019-16779 2026-10-03T05:44:14.695494+00:00

In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be short, and it would be difficult to purposefully exploit this.

 https://cve.radiocsirt.org/vuln/ghsa-q58g-455p-8vw9 GHSA-q58g-455p-8vw9 — In RubyGem excon, interrupted Persistent Connections May Leak Response Data 2026-10-03T05:44:14.695524+00:00

Affected: RubyGems: excon

### Impact There was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be short, and it would be difficult to purposefully exploit this.

### Patches The problem has been patched in 0.71.0, users should upgrade to this or a newer version (if one exists).

### Workarounds Users can workaround the problem by disabling persistent connections, though this may cause performance implications.

### References See the [patch](https://github.com/excon/excon/commit/ccb57d7a422f020dc74f1de4e8fb505ab46d8a29) for further details.

### For more information If you have any questions or comments about this advisory: * Open an issue in [excon/issues](https://github.com/excon/excon/issues) * Email us at [geemus+github@gmail.com](mailto:geemus+github@gmail.com)

 https://cve.radiocsirt.org/vuln/gsd-2019-16779 gsd-2019-16779 2026-10-03T05:44:14.695555+00:00 gsd-2019-16779 https://cve.radiocsirt.org/vuln/oesa-2021-1420 OESA-2021-1420 — rubygem-excon security update 2026-10-03T05:44:14.695567+00:00

Affected: openEuler:20.03-LTS-SP1: rubygem-excon, openEuler:20.03-LTS-SP2: rubygem-excon

EXtended http(s) CONnections. Security Fix(es): In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be short, and it would be difficult to purposefully exploit this.(CVE-2019-16779)

 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0036-1 openSUSE-SU-2020:0036-1 — Security update for rubygem-excon 2026-10-03T05:44:14.695591+00:00

Security update for rubygem-excon

 https://cve.radiocsirt.org/vuln/suse-su-2020:2053-1 SUSE-SU-2020:2053-1 — Security update for rubygem-excon 2026-10-03T05:44:14.695607+00:00

Security update for rubygem-excon

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-16779 UBUNTU-CVE-2019-16779 2026-10-03T05:44:14.695620+00:00

Affected: Ubuntu:16.04:LTS: ruby-excon, Ubuntu:18.04:LTS: ruby-excon

In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be short, and it would be difficult to purposefully exploit this.