https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:59:32.561208+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-envoy-2022-29228 BIT-envoy-2022-29228 — Reachable assertion in Envoy 2026-10-04T12:59:32.566635+00:00

Affected: Bitnami: envoy

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT() in newer versions and corrupts memory on earlier versions. continueDecoding() shouldn’t ever be called from filters after a local reply has been sent. Users are advised to upgrade. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-543 certfr-2022-avi-543 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un… 2026-10-04T12:59:32.566690+00:00 certfr-2022-avi-543 https://cve.radiocsirt.org/vuln/cnvd-2022-82668 cnvd-2022-82668 2026-10-04T12:59:32.566712+00:00 cnvd-2022-82668 https://cve.radiocsirt.org/vuln/euvd-2026-234062 EUVD-2026-234062 2026-10-04T12:59:32.566727+00:00 EUVD-2026-234062 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29228 fkie_cve-2022-29228 2026-10-04T12:59:32.566738+00:00

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT() in newer versions and corrupts memory on earlier versions. continueDecoding() shouldn’t ever be called from filters after a local reply has been sent. Users are advised to upgrade. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/gsd-2022-29228 gsd-2022-29228 2026-10-04T12:59:32.566762+00:00 gsd-2022-29228 https://cve.radiocsirt.org/vuln/rhsa-2022:5004 RHSA-2022:5004 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.3 security update 2026-10-04T12:59:32.566773+00:00

golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString golang: cmd/go: misinterpretation of branch names can lead to incorrect access control golang: crypto/elliptic: IsOnCurve returns true for invalid field elements envoy: Segfault in GrpcHealthCheckerImpl envoy: Decompressors can be zip bombed envoy: oauth filter allows trivial bypass envoy: oauth filter calls continueDecoding() from within decodeHeaders() Istio: Unsafe memory access in metadata exchange.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0288 WID-SEC-W-2022-0288 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-04T12:59:32.566802+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, einen nicht näher spezifizierten Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.