https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T18:15:29.655243+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-167948 EUVD-2026-167948 2026-10-16T18:15:29.658133+00:00 EUVD-2026-167948 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28441 fkie_cve-2020-28441 2026-10-16T18:15:29.658173+00:00

This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This can be exploited further depending on the context.

 https://cve.radiocsirt.org/vuln/ghsa-m6mg-jvjf-w44x GHSA-m6mg-jvjf-w44x — conf-cfg-ini Prototype Pollution via malicious INI file before v1.2.2 2026-10-16T18:15:29.658207+00:00

Affected: npm: conf-cfg-ini

This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This can be exploited further depending on the context.

 https://cve.radiocsirt.org/vuln/gsd-2020-28441 gsd-2020-28441 2026-10-16T18:15:29.658233+00:00 gsd-2020-28441