https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:09:01.086934+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0428 certfr-2023-avi-0428 — De multiples vulnérabilités ont été découvertes dans les produits <span class="textit">Splunk</span>. Certaines d'entre… 2026-10-02T15:09:01.106705+00:00 certfr-2023-avi-0428 https://cve.radiocsirt.org/vuln/euvd-2026-170429 EUVD-2026-170429 2026-10-02T15:09:01.106751+00:00 EUVD-2026-170429 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25858 fkie_cve-2022-25858 2026-10-02T15:09:01.106766+00:00

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

 https://cve.radiocsirt.org/vuln/ghsa-4wf5-vphf-c2xc GHSA-4wf5-vphf-c2xc — Terser insecure use of regular expressions leads to ReDoS 2026-10-02T15:09:01.106795+00:00

Affected: npm: terser

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

 https://cve.radiocsirt.org/vuln/gsd-2022-25858 gsd-2022-25858 2026-10-02T15:09:01.106820+00:00 gsd-2022-25858 https://cve.radiocsirt.org/vuln/msrc_cve-2022-25858 msrc_CVE-2022-25858 — Regular Expression Denial of Service (ReDoS) 2026-10-02T15:09:01.106831+00:00 msrc_CVE-2022-25858 https://cve.radiocsirt.org/vuln/rhsa-2022:6835 RHSA-2022:6835 — Red Hat Security Advisory: Service Registry (container images) release and security update [2.3.0.GA] 2026-10-02T15:09:01.106847+00:00

protobuf-java: potential DoS in the parsing procedure for binary data netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way cron-utils: template Injection leading to unauthenticated Remote Code Execution node-fetch: exposure of sensitive information to an unauthorized actor follow-redirects: Exposure of Sensitive Information via Authorization Header leak quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes prismjs: improperly escaped output allows a XSS node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery node-forge: Signature verification leniency in checking `DigestInfo` structure com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson snakeyaml: Denial of Service due to missing nested depth limitation for collections terser: insecure use of regular expressions leads to ReDoS postgresql-jdbc: Arbitrary File Write Vulnerability moment: inefficient parsing algorithm resulting in DoS graphql-java: DoS by malicious query

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25858 UBUNTU-CVE-2022-25858 2026-10-02T15:09:01.106898+00:00

Affected: Ubuntu:20.04:LTS: node-terser, Ubuntu:22.04:LTS: node-terser, Ubuntu:22.04:LTS: qt6-webengine, Ubuntu:24.04:LTS: node-terser, Ubuntu:24.04:LTS: qt6-webengine, Ubuntu:25.10: node-terser, Ubuntu:25.10: qt6-webengine, Ubuntu:26.04:LTS: node-terser, Ubuntu:26.04:LTS: qt6-webengine

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1603 WID-SEC-W-2022-1603 — IBM Tivoli Netcool/OMNIbus: Mehrere Schwachstellen 2026-10-02T15:09:01.106929+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Tivoli Netcool/OMNIbus ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.