https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:41:36.576947+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7639 ALSA-2022:7639 — Moderate: openblas security update 2026-10-03T01:41:36.597205+00:00

Affected: AlmaLinux:8: openblas, AlmaLinux:8: openblas-Rblas, AlmaLinux:8: openblas-devel, AlmaLinux:8: openblas-openmp, AlmaLinux:8: openblas-openmp64, AlmaLinux:8: openblas-openmp64_, AlmaLinux:8: openblas-serial64, AlmaLinux:8: openblas-serial64_, AlmaLinux:8: openblas-static, AlmaLinux:8: openblas-threads and 2 more

OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD version.

Security Fix(es):

* lapack: Out-of-bounds read in *larrv (CVE-2021-4048)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-03980 bdu:2025-03980 2026-10-03T01:41:36.597286+00:00 bdu:2025-03980 https://cve.radiocsirt.org/vuln/bit-openblas-2021-4048 BIT-openblas-2021-4048 2026-10-03T01:41:36.597303+00:00

Affected: Bitnami: openblas

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0086 certfr-2024-avi-0086 — De multiples vulnérabilités ont été découvertes dans Juniper. Elles permettent à un attaquant de provoquer une exécutio… 2026-10-03T01:41:36.597324+00:00 certfr-2024-avi-0086 https://cve.radiocsirt.org/vuln/euvd-2026-21255 EUVD-2026-21255 2026-10-03T01:41:36.597339+00:00 EUVD-2026-21255 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4048 fkie_cve-2021-4048 2026-10-03T01:41:36.597350+00:00

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

 https://cve.radiocsirt.org/vuln/ghsa-wgf2-cvhg-c384 GHSA-wgf2-cvhg-c384 2026-10-03T01:41:36.597371+00:00

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

 https://cve.radiocsirt.org/vuln/gsd-2021-4048 gsd-2021-4048 2026-10-03T01:41:36.597385+00:00 gsd-2021-4048 https://cve.radiocsirt.org/vuln/msrc_cve-2021-4048 msrc_CVE-2021-4048 — An out-of-bounds read flaw was found in the CLARRV DLARRV SLARRV and ZLARRV functions in lapack through version 3.10.0… 2026-10-03T01:41:36.597395+00:00 msrc_CVE-2021-4048 https://cve.radiocsirt.org/vuln/oesa-2021-1471 OESA-2021-1471 — lapack security update 2026-10-03T01:41:36.597411+00:00

Affected: openEuler:20.03-LTS-SP1: lapack, openEuler:20.03-LTS-SP2: lapack

The LAPACK libraries for numerical linear algebra. Security Fix(es): An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.(CVE-2021-4048)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0915-1 openSUSE-SU-2022:0915-1 — Security update for lapack 2026-10-03T01:41:36.597433+00:00

Security update for lapack

 https://cve.radiocsirt.org/vuln/rhsa-2023:6832 RHSA-2023:6832 — Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.0 security, enhancement & bug fix update 2026-10-03T01:41:36.597447+00:00

lapack: Out-of-bounds read in *larrv golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding hashicorp: html injection into web ui Hashicorp/vault: Vault’s LDAP Auth Method Allows for User Enumeration golang.org/x/net/html: Cross site scripting hashicorp/vault: Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets golang: net/http, net/textproto: denial of service from excessive memory allocation golang: html/template: improper sanitization of CSS values golang: html/template: improper handling of empty HTML attributes goproxy: Denial of service (DoS) via unspecified vectors. golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

 https://cve.radiocsirt.org/vuln/suse-su-2022:0913-1 SUSE-SU-2022:0913-1 — Security update for lapack 2026-10-03T01:41:36.597480+00:00

Security update for lapack

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-4048 UBUNTU-CVE-2021-4048 2026-10-03T01:41:36.597494+00:00

Affected: Ubuntu:14.04:LTS: openblas, Ubuntu:16.04:LTS: openblas, Ubuntu:18.04:LTS: lapack, Ubuntu:18.04:LTS: openblas, Ubuntu:20.04:LTS: lapack, Ubuntu:20.04:LTS: openblas

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2044 WID-SEC-W-2022-2044 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T01:41:36.597518+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Dateien zu manipulieren, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.