https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:04:00.396660+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02200 bdu:2022-02200 2026-10-05T01:04:00.501101+00:00 bdu:2022-02200 https://cve.radiocsirt.org/vuln/cnvd-2021-13245 cnvd-2021-13245 2026-10-05T01:04:00.501147+00:00 cnvd-2021-13245 https://cve.radiocsirt.org/vuln/euvd-2026-24970 EUVD-2026-24970 2026-10-05T01:04:00.501163+00:00 EUVD-2026-24970 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26120 fkie_cve-2021-26120 2026-10-05T01:04:00.501175+00:00

Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.

 https://cve.radiocsirt.org/vuln/ghsa-3rpf-5rqv-689q GHSA-3rpf-5rqv-689q — PHP Code Injection by malicious function name in smarty 2026-10-05T01:04:00.501204+00:00

Affected: Packagist: smarty/smarty

Template authors could inject php code by choosing a malicous {function} name. Sites that cannot fully trust template authors should update as soon as possible. Please upgrade to 3.1.39 or higher.

 https://cve.radiocsirt.org/vuln/gsd-2021-26120 gsd-2021-26120 2026-10-05T01:04:00.501229+00:00 gsd-2021-26120 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26120 UBUNTU-CVE-2021-26120 2026-10-05T01:04:00.501241+00:00

Affected: Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:18.04:LTS: smarty3, Ubuntu:Pro:20.04:LTS: smarty3

Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.