https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:28:22.074872+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-16458 EUVD-2026-16458 2026-10-03T05:28:22.430131+00:00 EUVD-2026-16458 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30322 fkie_cve-2022-30322 2026-10-03T05:28:22.430184+00:00

go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP responses. Fixed in 1.6.1 and 2.1.0.

 https://cve.radiocsirt.org/vuln/ghsa-cjr4-fv6c-f3mv GHSA-cjr4-fv6c-f3mv — HashiCorp go-getter unsafe downloads could lead to arbitrary host access 2026-10-03T05:28:22.430217+00:00

Affected: Go: github.com/hashicorp/go-getter, Go: github.com/hashicorp/go-getter/v2, Go: github.com/hashicorp/go-getter/s3/v2, Go: github.com/hashicorp/go-getter/gcs/v2

HashiCorp go-getter through 2.0.2 does not safely perform downloads. Arbitrary host access was possible via go-getter path traversal, symlink processing, and command injection flaws.

 https://cve.radiocsirt.org/vuln/gsd-2022-30322 gsd-2022-30322 2026-10-03T05:28:22.430250+00:00 gsd-2022-30322 https://cve.radiocsirt.org/vuln/rhsa-2022:5069 RHSA-2022:5069 — Red Hat Security Advisory: OpenShift Container Platform 4.11.0 bug fix and security update 2026-10-03T05:28:22.430263+00:00

nanoid: Information disclosure via valueOf() function sanitize-url: XSS due to improper sanitization in sanitizeUrl function opencontainers: OCI manifest and index parsing confusion golang.org/x/crypto: empty plaintext packet causes panic minimist: prototype pollution node-fetch: exposure of sensitive information to an unauthorized actor prometheus/client_golang: Denial of service using InstrumentHandlerCounter go-getter: command injection vulnerability golang: crash in a golang.org/x/crypto/ssh server go-getter: writes SSH credentials into logfile, exposing sensitive credentials to local uses go-getter: unsafe download (issue 1 of 3) go-getter: unsafe download (issue 2 of 3) go-getter: unsafe download (issue 3 of 3)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-30322 UBUNTU-CVE-2022-30322 2026-10-03T05:28:22.430298+00:00

Affected: Ubuntu:18.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:20.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:20.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:22.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:22.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:24.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:24.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:25.10: golang-github-hashicorp-go-getter

go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP responses. Fixed in 1.6.1 and 2.1.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0779 WID-SEC-W-2022-0779 — Red Hat OpenStack: Mehrere Schwachstellen 2026-10-03T05:28:22.430329+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.