https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:51:30.315332+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0276 certfr-2023-avi-0276 — De multiples vulnérabilités ont été découvertes dans <span class="textit">IBM</span>. Elles permettent à un attaquant d… 2026-10-02T19:51:30.433273+00:00 certfr-2023-avi-0276 https://cve.radiocsirt.org/vuln/euvd-2026-226526 EUVD-2026-226526 2026-10-02T19:51:30.433314+00:00 EUVD-2026-226526 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25927 fkie_cve-2022-25927 2026-10-02T19:51:30.433328+00:00

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

 https://cve.radiocsirt.org/vuln/ghsa-fhg7-m89q-25r3 GHSA-fhg7-m89q-25r3 — ReDoS Vulnerability in ua-parser-js version 2026-10-02T19:51:30.433355+00:00

Affected: npm: ua-parser-js

### Description: A regular expression denial of service (ReDoS) vulnerability has been discovered in `ua-parser-js`.

### Impact: This vulnerability bypass the library's `MAX_LENGTH` input limit prevention. By crafting a very-very-long user-agent string with specific pattern, an attacker can turn the script to get stuck processing for a very long time which results in a denial of service (DoS) condition.

### Affected Versions: From version `0.7.30` to before versions `0.7.33` / `1.0.33`.

### Patches: A patch has been released to remove the vulnerable regular expression, update to version `0.7.33` / `1.0.33` or later.

### References: [Regular expression Denial of Service - ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS)

### Credits: Thanks to @Snyk who first reported the issue.

 https://cve.radiocsirt.org/vuln/gsd-2022-25927 gsd-2022-25927 2026-10-02T19:51:30.433385+00:00 gsd-2022-25927 https://cve.radiocsirt.org/vuln/msrc_cve-2022-25927 msrc_CVE-2022-25927 — Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regu… 2026-10-02T19:51:30.433397+00:00 msrc_CVE-2022-25927 https://cve.radiocsirt.org/vuln/rhsa-2023:1428 RHSA-2023:1428 — Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.8 security and bug fix update 2026-10-02T19:51:30.433413+00:00

gin: Unsanitized input in the default logger in github.com/gin-gonic/gin express: "qs" prototype poisoning causes the hang of the node process http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability ua-parser-js: ReDoS vulnerability via the trim() function loader-utils: Regular expression denial of service decode-uri-component: improper input validation resulting in DoS json5: Prototype Pollution in JSON5 via Parse Method jszip: directory traversal via a crafted ZIP archive

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25927 UBUNTU-CVE-2022-25927 2026-10-02T19:51:30.433437+00:00

Affected: Ubuntu:18.04:LTS: node-ua-parser-js, Ubuntu:20.04:LTS: node-ua-parser-js, Ubuntu:22.04:LTS: node-ua-parser-js, Ubuntu:24.04:LTS: node-ua-parser-js, Ubuntu:25.10: node-ua-parser-js, Ubuntu:26.04:LTS: node-ua-parser-js

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0809 WID-SEC-W-2023-0809 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-02T19:51:30.433469+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.