https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:29:41.143291+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-176981 EUVD-2026-176981 2026-10-04T16:29:41.146149+00:00 EUVD-2026-176981 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23435 fkie_cve-2021-23435 2026-10-04T16:29:41.146180+00:00

This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of session[:return_to]. If the value used for return_to contains multiple leading slashes (/////example.com) the user ends up being redirected to the external domain that comes after the slashes (http://example.com).

 https://cve.radiocsirt.org/vuln/ghsa-4hpq-rjcx-7vj9 GHSA-4hpq-rjcx-7vj9 — Clearance Gem Open Redirect Vulnerability 2026-10-04T16:29:41.146212+00:00

Affected: RubyGems: clearance

This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of `session[:return_to]`. If the value used for return_to contains multiple leading slashes (`/////example.com`) the user ends up being redirected to the external domain that comes after the slashes (`http://example.com`).

 https://cve.radiocsirt.org/vuln/gsd-2021-23435 gsd-2021-23435 2026-10-04T16:29:41.146235+00:00 gsd-2021-23435