https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:22:07.595909+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01721 bdu:2022-01721 2026-10-03T04:22:07.960645+00:00 bdu:2022-01721 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0003 certfr-2025-avi-0003 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T04:22:07.960713+00:00 certfr-2025-avi-0003 https://cve.radiocsirt.org/vuln/euvd-2026-11210 EUVD-2026-11210 2026-10-03T04:22:07.960735+00:00 EUVD-2026-11210 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0759 fkie_cve-2022-0759 2026-10-03T04:22:07.960747+00:00

A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).

 https://cve.radiocsirt.org/vuln/ghsa-69p3-xp37-f692 GHSA-69p3-xp37-f692 — Improper Certificate Validation in kubeclient 2026-10-03T04:22:07.960779+00:00

Affected: RubyGems: kubeclient

A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).

 https://cve.radiocsirt.org/vuln/gsd-2022-0759 gsd-2022-0759 2026-10-03T04:22:07.960804+00:00 gsd-2022-0759 https://cve.radiocsirt.org/vuln/rhsa-2022:1461 RHSA-2022:1461 — Red Hat Security Advisory: Logging Subsystem 5.4 - Red Hat OpenShift Security and Bug update 2026-10-03T04:22:07.960815+00:00

kubeclient: kubeconfig parsing error can lead to MITM attacks prometheus/client_golang: Denial of service using InstrumentHandlerCounter

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0759 UBUNTU-CVE-2022-0759 2026-10-03T04:22:07.960834+00:00

Affected: Ubuntu:18.04:LTS: ruby-kubeclient, Ubuntu:20.04:LTS: ruby-kubeclient, Ubuntu:22.04:LTS: ruby-kubeclient, Ubuntu:24.04:LTS: ruby-kubeclient, Ubuntu:25.10: ruby-kubeclient, Ubuntu:26.04:LTS: ruby-kubeclient

A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0069 WID-SEC-W-2022-0069 — Red Hat OpenShift Logging Subsystem: Mehrere Schwachstellen 2026-10-03T04:22:07.960863+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Logging Subsystem ausnutzen, um Sicherheitsmechanismen zu umgehen und um einen Denial of Service Zustand herbeizuführen.