https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:17:39.519051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02264 bdu:2022-02264 2026-10-04T11:17:39.626725+00:00 bdu:2022-02264 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1020 certfr-2023-avi-1020 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-04T11:17:39.626763+00:00 certfr-2023-avi-1020 https://cve.radiocsirt.org/vuln/euvd-2026-170844 EUVD-2026-170844 2026-10-04T11:17:39.626783+00:00 EUVD-2026-170844 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23413 fkie_cve-2021-23413 2026-10-04T11:17:39.626795+00:00

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.

 https://cve.radiocsirt.org/vuln/ghsa-jg8v-48h5-wgxg GHSA-jg8v-48h5-wgxg — jszip Vulnerable to Prototype Pollution 2026-10-04T11:17:39.626824+00:00

Affected: npm: jszip

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g `__proto__`, `toString`, etc) results in a returned object with a modified prototype instance.

 https://cve.radiocsirt.org/vuln/gsd-2021-23413 gsd-2021-23413 2026-10-04T11:17:39.626846+00:00 gsd-2021-23413 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23413 UBUNTU-CVE-2021-23413 2026-10-04T11:17:39.626857+00:00

Affected: Ubuntu:18.04:LTS: node-jszip, Ubuntu:20.04:LTS: node-jszip, Ubuntu:22.04:LTS: node-jszip, Ubuntu:24.04:LTS: node-jszip, Ubuntu:25.10: node-jszip, Ubuntu:26.04:LTS: node-jszip

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1020 WID-SEC-W-2023-1020 — Oracle Construction and Engineering: Mehrere Schwachstellen 2026-10-04T11:17:39.626883+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.