https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T10:45:45.680099+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-02844 bdu:2021-02844 2026-10-25T10:45:45.683274+00:00 bdu:2021-02844 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23334 fkie_cve-2021-23334 2026-10-25T10:45:45.683304+00:00

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

 https://cve.radiocsirt.org/vuln/ghsa-8v27-2fg9-7h62 Withdrawn: GHSA-8v27-2fg9-7h62 — Withdrawn: Arbitrary Code Execution in static-eval 2026-10-25T10:45:45.683332+00:00

Withdrawn by the publisher.

Affected: npm: static-eval

All versions of package static-eval are vulnerable to Arbitrary Code Execution using FunctionExpressions and TemplateLiterals. PoC: var evaluate = require('static-eval'); var parse = require('esprima').parse; var src="(function (x) { return ${eval("console.log(global.process.mainModule.constructor._load('child_process').execSync('ls').toString())")} })()" var ast = parse(src).body[0].expression; evaluate(ast)

# WITHDRAWN

This was deemed not a vulnerability. See [this issue](https://github.com/browserify/static-eval/issues/34) for details.

 https://cve.radiocsirt.org/vuln/gsd-2021-23334 gsd-2021-23334 2026-10-25T10:45:45.683360+00:00 gsd-2021-23334 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23334 Withdrawn: UBUNTU-CVE-2021-23334 2026-10-25T10:45:45.683372+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:18.04:LTS: node-static-eval, Ubuntu:Pro:20.04:LTS: node-static-eval

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.