https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:08:22.859959+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4272 ALSA-2020:4272 — Moderate: nodejs:12 security and bug fix update 2026-10-03T13:08:23.097870+00:00

Affected: AlmaLinux:8: nodejs-nodemon, AlmaLinux:8: nodejs-packaging

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (12.18.4).

Security Fix(es):

* nodejs-dot-prop: prototype pollution (CVE-2020-8116)

* nodejs: HTTP request smuggling due to CR-to-Hyphen conversion (CVE-2020-8201)

* npm: Sensitive information exposure through logs (CVE-2020-15095)

* libuv: buffer overflow in realpath (CVE-2020-8252)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The nodejs:12/development module is not installable (BZ#1883966)

 https://cve.radiocsirt.org/vuln/bdu:2021-02884 bdu:2021-02884 2026-10-03T13:08:23.097950+00:00 bdu:2021-02884 https://cve.radiocsirt.org/vuln/certfr-2022-avi-278 certfr-2022-avi-278 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum discover. Certaines d'entre elles permettent à un att… 2026-10-03T13:08:23.097968+00:00 certfr-2022-avi-278 https://cve.radiocsirt.org/vuln/euvd-2026-38257 EUVD-2026-38257 2026-10-03T13:08:23.097985+00:00 EUVD-2026-38257 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8116 fkie_cve-2020-8116 2026-10-03T13:08:23.097997+00:00

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

 https://cve.radiocsirt.org/vuln/ghsa-ff7x-qrg7-qggm GHSA-ff7x-qrg7-qggm — dot-prop Prototype Pollution vulnerability 2026-10-03T13:08:23.098020+00:00

Affected: npm: dot-prop

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

 https://cve.radiocsirt.org/vuln/gsd-2020-8116 gsd-2020-8116 2026-10-03T13:08:23.098042+00:00 gsd-2020-8116 https://cve.radiocsirt.org/vuln/rhsa-2020:4272 RHSA-2020:4272 — Red Hat Security Advisory: nodejs:12 security and bug fix update 2026-10-03T13:08:23.098053+00:00

nodejs-dot-prop: prototype pollution nodejs: HTTP request smuggling due to CR-to-Hyphen conversion libuv: buffer overflow in realpath npm: sensitive information exposure through logs

 https://cve.radiocsirt.org/vuln/rhsa-2020:4903 RHSA-2020:4903 — Red Hat Security Advisory: nodejs:12 security and bug fix update 2026-10-03T13:08:23.098076+00:00

nodejs-dot-prop: prototype pollution nodejs: HTTP request smuggling due to CR-to-Hyphen conversion libuv: buffer overflow in realpath npm: sensitive information exposure through logs

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8116 UBUNTU-CVE-2020-8116 2026-10-03T13:08:23.098096+00:00

Affected: Ubuntu:18.04:LTS: node-dot-prop

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1350 WID-SEC-W-2023-1350 — Splunk Splunk Enterprise: Mehrere Schwachstellen in Komponenten von Drittanbietern 2026-10-03T13:08:23.098115+00:00

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise in diversen Komponenten von Drittanbietern ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.