https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:44:10.447914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2020-29509 Withdrawn: BELL-CVE-2020-29509 — CVE-2020-29509 does not affect BellSoft software 2026-10-03T23:44:10.618862+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-golang-2020-29509 BIT-golang-2020-29509 2026-10-03T23:44:10.618913+00:00

Affected: Bitnami: golang

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T23:44:10.618949+00:00 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-184423 EUVD-2026-184423 2026-10-03T23:44:10.618968+00:00 EUVD-2026-184423 https://cve.radiocsirt.org/vuln/fkie_cve-2020-29509 fkie_cve-2020-29509 2026-10-03T23:44:10.618982+00:00

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

 https://cve.radiocsirt.org/vuln/ghsa-xhqq-x44f-9fgg GHSA-xhqq-x44f-9fgg — Authentication Bypass in github.com/russellhaering/gosaml2 2026-10-03T23:44:10.619004+00:00

Affected: Go: github.com/russellhaering/gosaml2

### Impact Given a valid SAML Response, it may be possible for an attacker to mutate the XML document in such a way that gosaml2 will trust a different portion of the document than was signed.

Depending on the implementation of the Service Provider this enables a variety of attacks, including users accessing accounts other than the one to which they authenticated in the Identity Provider, or full authentication bypass.

### Patches Service Providers utilizing gosaml2 should upgrade to v0.6.0 or greater.

 https://cve.radiocsirt.org/vuln/gsd-2020-29509 gsd-2020-29509 2026-10-03T23:44:10.619030+00:00 gsd-2020-29509 https://cve.radiocsirt.org/vuln/msrc_cve-2020-29509 msrc_CVE-2020-29509 — The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes… 2026-10-03T23:44:10.619042+00:00 msrc_CVE-2020-29509 https://cve.radiocsirt.org/vuln/oesa-2021-1011 OESA-2021-1011 — golang security update 2026-10-03T23:44:10.619060+00:00

Affected: openEuler:20.03-LTS: golang, openEuler:20.03-LTS-SP1: golang

The Go Programming Language.\r\n\r\n Security Fix(es):\r\n\r\n The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.(CVE-2020-29509)\r\n\r\n

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-29509 UBUNTU-CVE-2020-29509 2026-10-03T23:44:10.619087+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.13, Ubuntu:20.04:LTS: golang-1.14 and 1 more

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 WID-SEC-W-2024-0794 — Dell ECS: Mehrere Schwachstellen 2026-10-03T23:44:10.619129+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.