https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:07:46.696270+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-25036 EUVD-2026-25036 2026-10-03T13:07:46.832393+00:00 EUVD-2026-25036 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26539 fkie_cve-2021-26539 2026-10-03T13:07:46.832439+00:00

Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option.

 https://cve.radiocsirt.org/vuln/ghsa-rjqq-98f6-6j3r GHSA-rjqq-98f6-6j3r — Improper Input Validation in sanitize-html 2026-10-03T13:07:46.832478+00:00

Affected: npm: sanitize-html

Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option.

 https://cve.radiocsirt.org/vuln/gsd-2021-26539 gsd-2021-26539 2026-10-03T13:07:46.832504+00:00 gsd-2021-26539 https://cve.radiocsirt.org/vuln/rhsa-2021:2438 RHSA-2021:2438 — Red Hat Security Advisory: OpenShift Container Platform 4.8.2 bug fix and security update 2026-10-03T13:07:46.832517+00:00

SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) nodejs-y18n: prototype pollution vulnerability etcd: Large slice causes panic in decodeRecord method etcd: DoS in wal/wal.go etcd: directories created via os.MkdirAll are not checked for permissions etcd: gateway can include itself as an endpoint resulting in resource exhaustion and leads to DoS etcd: no authentication is performed against endpoints provided in the --endpoints flag jwt-go: access restriction bypass vulnerability nodejs-glob-parent: Regular expression denial of service nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag golang: crypto/elliptic: incorrect operations on the P-224 curve gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation containernetworking-cni: Arbitrary path injection via type field in CNI configuration fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise containers/storage: DoS via malicious image go.elastic.co/apm: leaks sensitive HTTP headers during panic nodejs-lodash: command injection via template nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl() nodejs-postcss: Regular expression denial of service during source map parsing nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js sanitize-html: improper handling of internationali…