https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:47:43.817501+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03361 bdu:2022-03361 2026-10-04T14:47:43.914143+00:00 bdu:2022-03361 https://cve.radiocsirt.org/vuln/certfr-2022-avi-337 certfr-2022-avi-337 — De multiples vulnérabilités ont été corrigées dans <span class="textit">les produits Microsoft</span>. Elles permettent… 2026-10-04T14:47:43.914179+00:00 certfr-2022-avi-337 https://cve.radiocsirt.org/vuln/euvd-2026-208532 EUVD-2026-208532 2026-10-04T14:47:43.914199+00:00 EUVD-2026-208532 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26924 fkie_cve-2022-26924 2026-10-04T14:47:43.914212+00:00

YARP Denial of Service Vulnerability

 https://cve.radiocsirt.org/vuln/ghsa-8xc6-g8xw-h2c4 GHSA-8xc6-g8xw-h2c4 — YARP Denial of Service Vulnerability 2026-10-04T14:47:43.914239+00:00

Affected: NuGet: Yarp.ReverseProxy

### Impact

A denial of service vulnerability exists in how YARP processes input.

### Patches

If you're using YARP `1.0.0`, you should update to NuGet package version [`1.0.1`](https://www.nuget.org/packages/Yarp.ReverseProxy/1.0.1). If you're using YARP `1.1.0-RC.1`, you should update to NuGet package version [`1.1.0-rc.1.22211.2`](https://www.nuget.org/packages/Yarp.ReverseProxy/1.1.0-rc.1.22211.2).

You can do so by updating the `PackageReference` in your `.csproj` file ```diff <ItemGroup> - <PackageReference Include="Yarp.ReverseProxy" Version="1.0.0" /> - <PackageReference Include="Yarp.Telemetry.Consumption" Version="1.0.0" /> + <PackageReference Include="Yarp.ReverseProxy" Version="1.0.1" /> + <PackageReference Include="Yarp.Telemetry.Consumption" Version="1.0.1" /> </ItemGroup> ``` or by selecting `1.0.1` in the NuGet UI inside Visual Studio (`Manage NuGet Packages` / `Updates`) ![image](https://user-images.githubusercontent.com/25307628/162951795-a30f8ed7-77ef-4c4f-920e-58d9e1587ad1.png)

### References

[CVE-2022-26924](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26924)

 https://cve.radiocsirt.org/vuln/gsd-2022-26924 gsd-2022-26924 2026-10-04T14:47:43.914278+00:00 gsd-2022-26924 https://cve.radiocsirt.org/vuln/msrc_cve-2022-26924 msrc_CVE-2022-26924 — YARP Denial of Service Vulnerability 2026-10-04T14:47:43.914290+00:00 msrc_CVE-2022-26924