https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:39:45.809858+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-ep15881 Withdrawn: CLEANSTART-2026-EP15881 — Security fixes in cert-manager-webhook-pdns-fips 2.3.0-r0 2026-10-02T19:39:45.814896+00:00

Withdrawn by the publisher.

Affected: CleanStart: cert-manager-webhook-pdns-fips

Package cert-manager-webhook-pdns-fips version 2.3.0-r0 fixes 17 vulnerabilities: CVE-2022-1996, CVE-2023-45142, CVE-2023-25151, CVE-2022-21698, CVE-2022-30636...

 https://cve.radiocsirt.org/vuln/euvd-2026-138513 EUVD-2026-138513 2026-10-02T19:39:45.814954+00:00 EUVD-2026-138513 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30636 fkie_cve-2022-30636 2026-10-02T19:39:45.814976+00:00

httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token value to lookup in the DirCache implementation. On Windows, path.Base acts differently to filepath.Base, since Windows uses a different path separator (\ vs. /), allowing a user to provide a relative path, i.e. .well-known/acme-challenge/..\..\asd becomes ..\..\asd. The extracted path is then suffixed with +http-01, joined with the cache directory, and opened. Since the controlled path is suffixed with +http-01 before opening, the impact of this is significantly limited, since it only allows reading arbitrary files on the system if and only if they have this suffix.

 https://cve.radiocsirt.org/vuln/gsd-2022-30636 gsd-2022-30636 2026-10-02T19:39:45.815019+00:00 gsd-2022-30636