https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:24:15.635115+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-15722 EUVD-2026-15722 2026-10-03T08:24:15.924993+00:00 EUVD-2026-15722 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28366 fkie_cve-2022-28366 2026-10-03T08:24:15.925044+00:00

Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 (also affecting OWASP AntiSamy before 1.6.6), but 1.9.22 is the last version of CyberNeko HTML. NOTE: this may be related to CVE-2022-24839.

 https://cve.radiocsirt.org/vuln/ghsa-g9hh-vvx3-v37v GHSA-g9hh-vvx3-v37v — Denial of service in HtmlUnit-Neko 2026-10-03T08:24:15.925107+00:00

Affected: Maven: net.sourceforge.htmlunit:neko-htmlunit

Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 (also affecting OWASP AntiSamy before 1.6.6), but 1.9.22 is the last version of CyberNeko HTML. NOTE: this may be related to CVE-2022-24939.

 https://cve.radiocsirt.org/vuln/gsd-2022-28366 gsd-2022-28366 2026-10-03T08:24:15.925154+00:00 gsd-2022-28366 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12022-1 openSUSE-SU-2024:12022-1 — nekohtml-1.9.22.noko2-1.1 on GA media 2026-10-03T08:24:15.925183+00:00

nekohtml-1.9.22.noko2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-28366 UBUNTU-CVE-2022-28366 2026-10-03T08:24:15.925216+00:00

Affected: Ubuntu:16.04:LTS: libowasp-antisamy-java, Ubuntu:18.04:LTS: libowasp-antisamy-java, Ubuntu:20.04:LTS: libowasp-antisamy-java, Ubuntu:22.04:LTS: libowasp-antisamy-java, Ubuntu:24.04:LTS: libowasp-antisamy-java, Ubuntu:25.10: libowasp-antisamy-java, Ubuntu:26.04:LTS: libowasp-antisamy-java

Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 (also affecting OWASP AntiSamy before 1.6.6), but 1.9.22 is the last version of CyberNeko HTML. NOTE: this may be related to CVE-2022-24839.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2993 WID-SEC-W-2023-2993 — Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence and Atlassian Jira Software: Mehrere Schwachstellen 2026-10-03T08:24:15.925279+00:00

Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuführen.