https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:41:24.225617+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0630 certfr-2024-avi-0630 — De multiples vulnérabilités ont été découvertes dans IBM QRadar. Certaines d'entre elles permettent à un attaquant de p… 2026-10-04T17:41:24.312383+00:00 certfr-2024-avi-0630 https://cve.radiocsirt.org/vuln/euvd-2026-23491 EUVD-2026-23491 2026-10-04T17:41:24.312424+00:00 EUVD-2026-23491 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24033 fkie_cve-2021-24033 2026-10-04T17:41:24.312439+00:00

react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. Only when this function is manually invoked with user-provided values (ie: by custom code) is there the potential for command injection. If you're consuming it from react-scripts then this issue does not affect you.

 https://cve.radiocsirt.org/vuln/ghsa-5q6m-3h65-w53x GHSA-5q6m-3h65-w53x — react-dev-utils OS Command Injection in function `getProcessForPort` 2026-10-04T17:41:24.312471+00:00

Affected: npm: react-dev-utils

react-dev-utils prior to v11.0.4 exposes a function, `getProcessForPort`, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. Only when this function is manually invoked with user-provided values (ie: by custom code) is there the potential for command injection. If you're consuming it from react-scripts then this issue does not affect you.

 https://cve.radiocsirt.org/vuln/gsd-2021-24033 gsd-2021-24033 2026-10-04T17:41:24.312497+00:00 gsd-2021-24033