https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:07:00.817420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-71456 cnvd-2021-71456 2026-10-04T01:07:00.820924+00:00 cnvd-2021-71456 https://cve.radiocsirt.org/vuln/euvd-2026-28183 EUVD-2026-28183 2026-10-04T01:07:00.820956+00:00 EUVD-2026-28183 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32822 fkie_cve-2021-32822 2026-10-04T01:07:00.820970+00:00

The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see the referenced GHSL-2021-020.

 https://cve.radiocsirt.org/vuln/ghsa-7f5c-rpf4-86p8 GHSA-7f5c-rpf4-86p8 — Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive Information t… 2026-10-04T01:07:00.821000+00:00

Affected: npm: hbs

The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see the referenced GHSL-2021-020.

 https://cve.radiocsirt.org/vuln/gsd-2021-32822 gsd-2021-32822 2026-10-04T01:07:00.821025+00:00 gsd-2021-32822 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2709 WID-SEC-W-2023-2709 — IBM QRadar SIEM (Pulse App): Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-04T01:07:00.821036+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM QRadar SIEM ausnutzen, um Informationen offenzulegen.