https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:57:54.696742+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02281 bdu:2024-02281 2026-10-10T19:57:54.729916+00:00 bdu:2024-02281 https://cve.radiocsirt.org/vuln/bit-git-2022-25648 BIT-git-2022-25648 — Command Injection 2026-10-10T19:57:54.729955+00:00

Affected: Bitnami: git

The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = 'origin', opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.

 https://cve.radiocsirt.org/vuln/euvd-2026-167087 EUVD-2026-167087 2026-10-10T19:57:54.729991+00:00 EUVD-2026-167087 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25648 fkie_cve-2022-25648 2026-10-10T19:57:54.730005+00:00

The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = 'origin', opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.

 https://cve.radiocsirt.org/vuln/ghsa-69p6-wvmq-27gg GHSA-69p6-wvmq-27gg — Command injection in ruby-git 2026-10-10T19:57:54.730028+00:00

Affected: RubyGems: git

The package prior to v1.11.0 is vulnerable to Command Injection via git argument injection. When calling the `fetch(remote = 'origin', opts = {})` function, the remote parameter is passed to the `git fetch` subcommand in a way such that additional flags can be set. The additional flags can be used to perform a command injection.

 https://cve.radiocsirt.org/vuln/gsd-2022-25648 gsd-2022-25648 2026-10-10T19:57:54.730051+00:00 gsd-2022-25648 https://cve.radiocsirt.org/vuln/rhsa-2022:8506 RHSA-2022:8506 — Red Hat Security Advisory: Satellite 6.12 Release 2026-10-10T19:57:54.730063+00:00

netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way django: Possible XSS via '{% debug %}' template tag nokogiri: ReDoS in HTML encoding detection ruby-git: package vulnerable to Command Injection via git argument injection rubygem-nokogiri: Improper Handling of Unexpected Data Type in Nokogiri sinatra: path traversal possible outside of public_dir when serving static files rubygem-rails-html-sanitizer: possible xss with certain configurations python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments foreman: foreman: OAuth secret exposure via unauthenticated access to the GraphQL API

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25648 UBUNTU-CVE-2022-25648 2026-10-10T19:57:54.730098+00:00

Affected: Ubuntu:16.04:LTS: ruby-git, Ubuntu:18.04:LTS: ruby-git, Ubuntu:20.04:LTS: ruby-git, Ubuntu:22.04:LTS: ruby-git, Ubuntu:24.04:LTS: ruby-git, Ubuntu:25.10: ruby-git, Ubuntu:26.04:LTS: ruby-git

The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = 'origin', opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2059 WID-SEC-W-2022-2059 — Ruby: Schwachstelle ermöglicht Codeausführung 2026-10-10T19:57:54.730127+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ruby-git ausnutzen, um beliebigen Programmcode auszuführen.