https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:16:11.648142+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-16276 EUVD-2026-16276 2026-10-03T14:16:11.837921+00:00 EUVD-2026-16276 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29810 fkie_cve-2022-29810 2026-10-03T14:16:11.837967+00:00

The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter.

 https://cve.radiocsirt.org/vuln/ghsa-27rq-4943-qcwp GHSA-27rq-4943-qcwp — Insertion of Sensitive Information into Log File in Hashicorp go-getter 2026-10-03T14:16:11.838002+00:00

Affected: Go: github.com/hashicorp/go-getter

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to read the logfile.

 https://cve.radiocsirt.org/vuln/gsd-2022-29810 gsd-2022-29810 2026-10-03T14:16:11.838028+00:00 gsd-2022-29810 https://cve.radiocsirt.org/vuln/rhsa-2022:4956 RHSA-2022:4956 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5 security updates, images, and bug fixes 2026-10-03T14:16:11.838040+00:00

nodejs-json-schema: Prototype pollution vulnerability opencontainers: OCI manifest and index parsing confusion golang.org/x/crypto: empty plaintext packet causes panic containerd: Unprivileged pod may bind mount any privileged regular file on disk minio: user privilege escalation in AddUser() admin API node-fetch: exposure of sensitive information to an unauthorized actor openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates nconf: Prototype pollution in memory store golang: crypto/elliptic: IsOnCurve returns true for invalid field elements nats-server: misusing the "dynamically provisioned sandbox accounts" feature authenticated user can obtain the privileges of the System account imgcrypt: Unauthorized access to encryted container image on a shared system due to missing check in CheckAuthorization() code path Moment.js: Path traversal in moment.locale golang: crash in a golang.org/x/crypto/ssh server go-getter: writes SSH credentials into logfile, exposing sensitive credentials to local uses

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0491 WID-SEC-W-2022-0491 — Red Hat Advanced Cluster Management: Mehrere Schwachstellen 2026-10-03T14:16:11.838084+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Advanced Cluster Management ausnutzen, um Daten zu manipulieren, einen Denial of Service zu verursachen oder Informationen offenzulagen.