https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:11:51.083942+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bsi-2022-0001 BSI-2022-0001 — CVRF-CSAF-Converter: XML External Entities Vulnerability 2026-10-03T13:11:51.195701+00:00 BSI-2022-0001 https://cve.radiocsirt.org/vuln/euvd-2026-15200 EUVD-2026-15200 2026-10-03T13:11:51.195752+00:00 EUVD-2026-15200 https://cve.radiocsirt.org/vuln/fkie_cve-2022-27193 fkie_cve-2022-27193 2026-10-03T13:11:51.195769+00:00

CVRF-CSAF-Converter before 1.0.0-rc2 resolves XML External Entities (XXE). This leads to the inclusion of arbitrary (local) file content into the generated output document. An attacker can exploit this to disclose information from the system running the converter.

 https://cve.radiocsirt.org/vuln/ghsa-m8gq-83gh-v42v GHSA-m8gq-83gh-v42v — XML External Entities Vulnerability in CVRF-CSAF-Converter 2026-10-03T13:11:51.195803+00:00

Affected: PyPI: cvrf2csaf

CVRF-CSAF-Converter before 1.0.0-rc2 resolves XML External Entities (XXE). This leads to the inclusion of arbitrary (local) file content into the generated output document. An attacker can exploit this to disclose information from the system running the converter.

 https://cve.radiocsirt.org/vuln/gsd-2022-27193 gsd-2022-27193 2026-10-03T13:11:51.195828+00:00 gsd-2022-27193 https://cve.radiocsirt.org/vuln/pysec-2026-627 PYSEC-2026-627 — XML External Entities Vulnerability in CVRF-CSAF-Converter 2026-10-03T13:11:51.195841+00:00

Affected: PyPI: cvrf2csaf

CVRF-CSAF-Converter before 1.0.0-rc2 resolves XML External Entities (XXE). This leads to the inclusion of arbitrary (local) file content into the generated output document. An attacker can exploit this to disclose information from the system running the converter.