https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:28:53.230348+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-23222 cnvd-2020-23222 2026-10-03T19:28:53.337323+00:00 cnvd-2020-23222 https://cve.radiocsirt.org/vuln/euvd-2026-35625 EUVD-2026-35625 2026-10-03T19:28:53.337351+00:00 EUVD-2026-35625 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1762 fkie_cve-2020-1762 2026-10-03T19:28:53.337365+00:00

An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.

 https://cve.radiocsirt.org/vuln/ghsa-465w-gg5p-85c9 GHSA-465w-gg5p-85c9 — Insufficient Session Expiration in Kiali 2026-10-03T19:28:53.337392+00:00

Affected: Go: github.com/kiali/kiali

An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.

 https://cve.radiocsirt.org/vuln/gsd-2020-1762 gsd-2020-1762 2026-10-03T19:28:53.337426+00:00 gsd-2020-1762 https://cve.radiocsirt.org/vuln/rhsa-2020:0972 RHSA-2020:0972 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.10 Jaeger and Kiali security update 2026-10-03T19:28:53.337438+00:00

kiali: ignoring JWT claim fields npmjs-url-parse: Improper validation of protocol of the returned URL