https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:14:50.281684+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:1582 ALSA-2023:1582 — Moderate: nodejs:16 security, bug fix, and enhancement update 2026-10-04T04:14:50.615674+00:00

Affected: AlmaLinux:8: nodejs, AlmaLinux:8: nodejs-devel, AlmaLinux:8: nodejs-docs, AlmaLinux:8: nodejs-full-i18n, AlmaLinux:8: nodejs-nodemon, AlmaLinux:8: nodejs-packaging, AlmaLinux:8: npm

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (16.19.1).

Security Fix(es):

* glob-parent: Regular Expression Denial of Service (CVE-2021-35065) * c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904) * http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881) * Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918) * Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919) * Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936) * Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920) * Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bit-gulp-2021-35065 BIT-gulp-2021-35065 2026-10-04T04:14:50.615849+00:00

Affected: Bitnami: gulp

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-943 certfr-2021-avi-943 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T04:14:50.615910+00:00 certfr-2021-avi-943 https://cve.radiocsirt.org/vuln/euvd-2026-229177 EUVD-2026-229177 2026-10-04T04:14:50.615953+00:00 EUVD-2026-229177 https://cve.radiocsirt.org/vuln/fkie_cve-2021-35065 fkie_cve-2021-35065 2026-10-04T04:14:50.615981+00:00

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

 https://cve.radiocsirt.org/vuln/ghsa-cj88-88mr-972w GHSA-cj88-88mr-972w — glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service 2026-10-04T04:14:50.616028+00:00

Affected: npm: glob-parent

glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service (ReDoS). This issue is fixed in version 6.0.1.

This vulnerability is separate from [GHSA-ww39-953v-wcq6](https://github.com/advisories/GHSA-ww39-953v-wcq6).

 https://cve.radiocsirt.org/vuln/gsd-2021-35065 gsd-2021-35065 2026-10-04T04:14:50.616075+00:00 gsd-2021-35065 https://cve.radiocsirt.org/vuln/rhsa-2023:0612 RHSA-2023:0612 — Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update 2026-10-04T04:14:50.616100+00:00

glob-parent: Regular Expression Denial of Service minimist: prototype pollution node-fetch: exposure of sensitive information to an unauthorized actor nodejs-minimatch: ReDoS via the braceExpand function express: "qs" prototype poisoning causes the hang of the node process nodejs: DNS rebinding in inspect via invalid octal IP address

 https://cve.radiocsirt.org/vuln/rhsa-2023:1582 RHSA-2023:1582 — Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update 2026-10-04T04:14:50.616158+00:00

glob-parent: Regular Expression Denial of Service c-ares: buffer overflow in config_sortlist() due to missing string length check http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability Node.js: Permissions policies can be bypassed via process.mainModule Node.js: OpenSSL error handling issues in nodejs crypto library Node.js: insecure loading of ICU data through ICU_DATA environment variable Node.js: Fetch API did not protect against CRLF injection in host headers Node.js: Regular Expression Denial of Service in Headers fetch API

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-35065 UBUNTU-CVE-2021-35065 2026-10-04T04:14:50.616227+00:00

Affected: Ubuntu:18.04:LTS: node-glob-parent, Ubuntu:20.04:LTS: node-glob-parent

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0328 WID-SEC-W-2023-0328 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-04T04:14:50.616277+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen oder Daten zu manipulieren.