https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:25:49.916798+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-02876 bdu:2021-02876 2026-10-02T14:25:50.102436+00:00 bdu:2021-02876 https://cve.radiocsirt.org/vuln/certfr-2021-avi-943 certfr-2021-avi-943 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T14:25:50.102473+00:00 certfr-2021-avi-943 https://cve.radiocsirt.org/vuln/cnvd-2021-36018 cnvd-2021-36018 2026-10-02T14:25:50.102492+00:00 cnvd-2021-36018 https://cve.radiocsirt.org/vuln/euvd-2026-165935 EUVD-2026-165935 2026-10-02T14:25:50.102504+00:00 EUVD-2026-165935 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23368 fkie_cve-2021-23368 2026-10-02T14:25:50.102514+00:00

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.

 https://cve.radiocsirt.org/vuln/ghsa-hwj9-h5mp-3pm3 GHSA-hwj9-h5mp-3pm3 — Regular Expression Denial of Service in postcss 2026-10-02T14:25:50.102539+00:00

Affected: npm: postcss

The npm package `postcss` from 7.0.0 and before versions 7.0.36 and 8.2.10 is vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.

 https://cve.radiocsirt.org/vuln/gsd-2021-23368 gsd-2021-23368 2026-10-02T14:25:50.102562+00:00 gsd-2021-23368 https://cve.radiocsirt.org/vuln/rhsa-2021:2438 RHSA-2021:2438 — Red Hat Security Advisory: OpenShift Container Platform 4.8.2 bug fix and security update 2026-10-02T14:25:50.102572+00:00

SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) nodejs-y18n: prototype pollution vulnerability etcd: Large slice causes panic in decodeRecord method etcd: DoS in wal/wal.go etcd: directories created via os.MkdirAll are not checked for permissions etcd: gateway can include itself as an endpoint resulting in resource exhaustion and leads to DoS etcd: no authentication is performed against endpoints provided in the --endpoints flag jwt-go: access restriction bypass vulnerability nodejs-glob-parent: Regular expression denial of service nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag golang: crypto/elliptic: incorrect operations on the P-224 curve gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation containernetworking-cni: Arbitrary path injection via type field in CNI configuration fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise containers/storage: DoS via malicious image go.elastic.co/apm: leaks sensitive HTTP headers during panic nodejs-lodash: command injection via template nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl() nodejs-postcss: Regular expression denial of service during source map parsing nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js sanitize-html: improper handling of internationali…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23368 UBUNTU-CVE-2021-23368 2026-10-02T14:25:50.102640+00:00

Affected: Ubuntu:22.04:LTS: node-postcss

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0809 WID-SEC-W-2023-0809 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-02T14:25:50.102658+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.