https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:19:22.213673+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-25808 EUVD-2026-25808 2026-10-03T05:19:22.353050+00:00 EUVD-2026-25808 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28092 fkie_cve-2021-28092 2026-10-03T05:19:22.353105+00:00

The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input for a very long time.

 https://cve.radiocsirt.org/vuln/ghsa-7r28-3m3f-r2pr GHSA-7r28-3m3f-r2pr — Regular Expression Denial of Service (ReDoS) 2026-10-03T05:19:22.353141+00:00

Affected: npm: is-svg

The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input.

 https://cve.radiocsirt.org/vuln/gsd-2021-28092 gsd-2021-28092 2026-10-03T05:19:22.353167+00:00 gsd-2021-28092 https://cve.radiocsirt.org/vuln/rhsa-2021:1499 RHSA-2021:1499 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.3 security and bug fix update 2026-10-03T05:19:22.353179+00:00

nodejs-glob-parent: Regular expression denial of service nodejs-underscore: Arbitrary code execution via the template function nodejs-is-svg: ReDoS via malicious string nodejs-netmask: improper input validation of octal input data nodejs-netmask: incorrectly parses an IP address that has octal integer with invalid character

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1354 WID-SEC-W-2022-1354 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T05:19:22.353207+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.