https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:54:02.390429+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0276 certfr-2023-avi-0276 — De multiples vulnérabilités ont été découvertes dans <span class="textit">IBM</span>. Elles permettent à un attaquant d… 2026-10-03T19:54:02.455081+00:00 certfr-2023-avi-0276 https://cve.radiocsirt.org/vuln/euvd-2026-30488 EUVD-2026-30488 2026-10-03T19:54:02.455124+00:00 EUVD-2026-30488 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39227 fkie_cve-2021-39227 2026-10-03T19:54:02.455139+00:00

ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using `merge` and `clone` helper methods in the `src/core/util.ts` module results in prototype pollution. It affects the popular data visualization library Apache ECharts, which uses and exports these two methods directly. The GitHub Security Advisory page for this vulnerability contains a proof of concept. This issue is patched in ZRender version 5.2.1. One workaround is available: Check if there is `__proto__` in the object keys. Omit it before using it as an parameter in these affected methods. Or in `echarts.util.merge` and `setOption` if project is using ECharts.

 https://cve.radiocsirt.org/vuln/ghsa-fhv8-fx5f-7fxf GHSA-fhv8-fx5f-7fxf — Prototype Pollution in the merge and clone helper methods 2026-10-03T19:54:02.455173+00:00

Affected: npm: zrender

### Impact Using `merge` and `clone` helper methods in the `src/core/util.ts` module will have prototype pollution. It will affect the popular data visualization library Apache ECharts, which is using and exported these two methods directly.

### Patches It has been patched in https://github.com/ecomfe/zrender/pull/826. Users should update zrender to `5.2.1`. and update echarts to `5.2.1` if project is using echarts.

### References NA

### For more information NA

 https://cve.radiocsirt.org/vuln/gsd-2021-39227 gsd-2021-39227 2026-10-03T19:54:02.455201+00:00 gsd-2021-39227 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0809 WID-SEC-W-2023-0809 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-03T19:54:02.455227+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.