https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:20:11.672980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-golang-2021-33194 BIT-golang-2021-33194 2026-10-04T15:20:11.881719+00:00

Affected: Bitnami: golang

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T15:20:11.881774+00:00 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cleanstart-2026-nf32762 CLEANSTART-2026-NF32762 — Security fix for CVE-2021-33194 applied in: cfssl 1.5.0-r1 2026-10-04T15:20:11.881800+00:00

Affected: CleanStart: cfssl

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-28327 EUVD-2026-28327 2026-10-04T15:20:11.881822+00:00 EUVD-2026-28327 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33194 fkie_cve-2021-33194 2026-10-04T15:20:11.881834+00:00

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

 https://cve.radiocsirt.org/vuln/ghsa-83g2-8m93-v3w7 GHSA-83g2-8m93-v3w7 — golang.org/x/net/html Infinite Loop vulnerability 2026-10-04T15:20:11.881855+00:00

Affected: Go: golang.org/x/net

Go through 1.15.12 and 1.16.x through 1.16.4 has a golang.org/x/net/html infinite loop via crafted ParseFragment input.

 https://cve.radiocsirt.org/vuln/gsd-2021-33194 gsd-2021-33194 2026-10-04T15:20:11.881873+00:00 gsd-2021-33194 https://cve.radiocsirt.org/vuln/msrc_cve-2021-33194 msrc_CVE-2021-33194 — golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop… 2026-10-04T15:20:11.881885+00:00 msrc_CVE-2021-33194 https://cve.radiocsirt.org/vuln/rhsa-2021:2438 RHSA-2021:2438 — Red Hat Security Advisory: OpenShift Container Platform 4.8.2 bug fix and security update 2026-10-04T15:20:11.881902+00:00

SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) nodejs-y18n: prototype pollution vulnerability etcd: Large slice causes panic in decodeRecord method etcd: DoS in wal/wal.go etcd: directories created via os.MkdirAll are not checked for permissions etcd: gateway can include itself as an endpoint resulting in resource exhaustion and leads to DoS etcd: no authentication is performed against endpoints provided in the --endpoints flag jwt-go: access restriction bypass vulnerability nodejs-glob-parent: Regular expression denial of service nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag golang: crypto/elliptic: incorrect operations on the P-224 curve gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation containernetworking-cni: Arbitrary path injection via type field in CNI configuration fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise containers/storage: DoS via malicious image go.elastic.co/apm: leaks sensitive HTTP headers during panic nodejs-lodash: command injection via template nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl() nodejs-postcss: Regular expression denial of service during source map parsing nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js sanitize-html: improper handling of internationali…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-33194 UBUNTU-CVE-2021-33194 2026-10-04T15:20:11.881970+00:00

Affected: Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:Pro:20.04:LTS: golang-golang-x-net-dev

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 WID-SEC-W-2022-0510 — IBM DB2: Mehrere Schwachstellen 2026-10-04T15:20:11.881991+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.