https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:19:28.683737+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05301 bdu:2023-05301 2026-10-03T22:19:28.954385+00:00 bdu:2023-05301 https://cve.radiocsirt.org/vuln/bell-cve-2021-20206 Withdrawn: BELL-CVE-2021-20206 — CVE-2021-20206 does not affect BellSoft software 2026-10-03T22:19:28.954450+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T22:19:28.954472+00:00 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cleanstart-2024-os27994 CLEANSTART-2024-OS27994 — improper limitation of path name flaw was found in containernetworking/cni in versions before 0 2026-10-03T22:19:28.954489+00:00

Affected: CleanStart: buildah

Security vulnerability affects the buildah package. An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.

 https://cve.radiocsirt.org/vuln/euvd-2026-21514 EUVD-2026-21514 2026-10-03T22:19:28.954521+00:00 EUVD-2026-21514 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20206 fkie_cve-2021-20206 2026-10-03T22:19:28.954534+00:00

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as 'reboot'. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

 https://cve.radiocsirt.org/vuln/ghsa-xjqr-g762-pxwp GHSA-xjqr-g762-pxwp — containernetworking/cni improper limitation of path name 2026-10-03T22:19:28.954560+00:00

Affected: Go: github.com/containernetworking/cni

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as 'reboot'. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. ### Specific Go Packages Affected github.com/containernetworking/cni/pkg/invoke

 https://cve.radiocsirt.org/vuln/gsd-2021-20206 gsd-2021-20206 2026-10-03T22:19:28.954586+00:00 gsd-2021-20206 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0770-1 openSUSE-SU-2022:0770-1 — Security update for buildah 2026-10-03T22:19:28.954597+00:00

Security update for buildah

 https://cve.radiocsirt.org/vuln/rhsa-2021:0799 RHSA-2021:0799 — Red Hat Security Advisory: OpenShift Virtualization 2.6.0 security and bug fix update 2026-10-03T22:19:28.954616+00:00

golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash golang: data race in certain net/http servers including ReverseProxy can lead to DoS golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs jwt-go: access restriction bypass vulnerability golang-github-gorilla-websocket: integer overflow leads to denial of service golang: math/big: panic during recursive division of very large numbers golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation containernetworking-cni: Arbitrary path injection via type field in CNI configuration

 https://cve.radiocsirt.org/vuln/suse-su-2022:0770-1 SUSE-SU-2022:0770-1 — Security update for buildah 2026-10-03T22:19:28.954649+00:00

Security update for buildah

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20206 UBUNTU-CVE-2021-20206 2026-10-03T22:19:28.954666+00:00

Affected: Ubuntu:18.04:LTS: golang-github-appc-cni, Ubuntu:20.04:LTS: golang-github-appc-cni, Ubuntu:22.04:LTS: golang-github-appc-cni, Ubuntu:24.04:LTS: golang-github-appc-cni, Ubuntu:25.10: golang-github-appc-cni, Ubuntu:26.04:LTS: golang-github-appc-cni

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as 'reboot'. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 WID-SEC-W-2022-0510 — IBM DB2: Mehrere Schwachstellen 2026-10-03T22:19:28.954696+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.