https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:57:23.894119+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-543 certfr-2022-avi-543 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un… 2026-10-04T13:57:23.898858+00:00 certfr-2022-avi-543 https://cve.radiocsirt.org/vuln/euvd-2026-234056 EUVD-2026-234056 2026-10-04T13:57:23.898895+00:00 EUVD-2026-234056 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31045 fkie_cve-2022-31045 2026-10-04T13:57:23.898910+00:00

Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress Gateway exposed to external traffic. This vulnerability has been resolved in versions 1.12.8, 1.13.5, and 1.14.1. Users are advised to upgrade. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-xwx5-5c9g-x68x GHSA-xwx5-5c9g-x68x — Ill-formed headers may lead to unexpected behavior in Istio 2026-10-04T13:57:23.898941+00:00

Affected: Go: istio.io/istio

### Impact Ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing.

You are at most risk if you have an Istio ingress Gateway exposed to external traffic.

### Patches 1.12.8, 1.13.5, 1.14.1

### Workarounds No.

### References More details can be found in the [Istio Security Bulletin](https://istio.io/latest/news/security/istio-security-2022-05)

### For more information If you have any questions or comments about this advisory, please email us at [istio-security-vulnerability-reports@googlegroups.com](mailto:istio-security-vulnerability-reports@googlegroups.com)

 https://cve.radiocsirt.org/vuln/gsd-2022-31045 gsd-2022-31045 2026-10-04T13:57:23.898972+00:00 gsd-2022-31045 https://cve.radiocsirt.org/vuln/rhsa-2022:5004 RHSA-2022:5004 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.3 security update 2026-10-04T13:57:23.898985+00:00

golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString golang: cmd/go: misinterpretation of branch names can lead to incorrect access control golang: crypto/elliptic: IsOnCurve returns true for invalid field elements envoy: Segfault in GrpcHealthCheckerImpl envoy: Decompressors can be zip bombed envoy: oauth filter allows trivial bypass envoy: oauth filter calls continueDecoding() from within decodeHeaders() Istio: Unsafe memory access in metadata exchange.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0288 WID-SEC-W-2022-0288 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-04T13:57:23.899010+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, einen nicht näher spezifizierten Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.