https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:11:19.086243+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04157 bdu:2022-04157 2026-10-04T10:11:19.093285+00:00 bdu:2022-04157 https://cve.radiocsirt.org/vuln/bit-envoy-2022-29225 BIT-envoy-2022-29225 — Zip bomb vulnerability in Envoy 2026-10-04T10:11:19.093319+00:00

Affected: Bitnami: envoy

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in the decode/encodeBody. This may allow an attacker to zip bomb the decompressor by sending a small highly compressed payload. Maliciously constructed zip files may exhaust system memory and cause a denial of service. Users are advised to upgrade. Users unable to upgrade may consider disabling decompression.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-543 certfr-2022-avi-543 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un… 2026-10-04T10:11:19.093353+00:00 certfr-2022-avi-543 https://cve.radiocsirt.org/vuln/cnvd-2022-82665 cnvd-2022-82665 2026-10-04T10:11:19.093371+00:00 cnvd-2022-82665 https://cve.radiocsirt.org/vuln/euvd-2026-232697 EUVD-2026-232697 2026-10-04T10:11:19.093382+00:00 EUVD-2026-232697 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29225 fkie_cve-2022-29225 2026-10-04T10:11:19.093392+00:00

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in the decode/encodeBody. This may allow an attacker to zip bomb the decompressor by sending a small highly compressed payload. Maliciously constructed zip files may exhaust system memory and cause a denial of service. Users are advised to upgrade. Users unable to upgrade may consider disabling decompression.

 https://cve.radiocsirt.org/vuln/gsd-2022-29225 gsd-2022-29225 2026-10-04T10:11:19.093413+00:00 gsd-2022-29225 https://cve.radiocsirt.org/vuln/rhsa-2022:5003 RHSA-2022:5003 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.10 security update 2026-10-04T10:11:19.093423+00:00

envoy: Segfault in GrpcHealthCheckerImpl envoy: Decompressors can be zip bombed

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0288 WID-SEC-W-2022-0288 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-04T10:11:19.093440+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, einen nicht näher spezifizierten Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.