https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:31:56.552247+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:6448 ALSA-2022:6448 — Moderate: nodejs:14 security and bug fix update 2026-10-02T20:31:56.773519+00:00

Affected: AlmaLinux:8: nodejs, AlmaLinux:8: nodejs-devel, AlmaLinux:8: nodejs-docs, AlmaLinux:8: nodejs-full-i18n, AlmaLinux:8: nodejs-nodemon, AlmaLinux:8: nodejs-packaging, AlmaLinux:8: npm

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

* nodejs: DNS rebinding in --inspect via invalid IP addresses (CVE-2022-32212) * nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding (CVE-2022-32213) * nodejs: HTTP request smuggling due to improper delimiting of header fields (CVE-2022-32214) * nodejs: HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding (CVE-2022-32215) * got: missing verification of requested URLs allows redirects to UNIX sockets (CVE-2022-33987)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* nodejs:14/nodejs: rebase to latest upstream release (BZ#2106367) * nodejs:14/nodejs: Specify --with-default-icu-data-dir when using bootstrap build (BZ#2111417)

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-831 certfr-2022-avi-831 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T20:31:56.773612+00:00 certfr-2022-avi-831 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad27625 Withdrawn: CLEANSTART-2026-AD27625 — Security fixes for CVE-2022-25881, CVE-2022-33987, CVE-2025-25285, CVE-2025-62718, CVE-2025-69873, CVE-2026-21637, CVE-… 2026-10-02T20:31:56.773634+00:00

Withdrawn by the publisher.

Affected: CleanStart: mongosh

Multiple security vulnerabilities affect the mongosh package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-17707 EUVD-2026-17707 2026-10-02T20:31:56.773662+00:00 EUVD-2026-17707 https://cve.radiocsirt.org/vuln/fkie_cve-2022-33987 fkie_cve-2022-33987 2026-10-02T20:31:56.773675+00:00

The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.

 https://cve.radiocsirt.org/vuln/ghsa-pfrx-2q88-qq97 GHSA-pfrx-2q88-qq97 — Got allows a redirect to a UNIX socket 2026-10-02T20:31:56.773697+00:00

Affected: npm: got

The got package before 11.8.5 and 12.1.0 for Node.js allows a redirect to a UNIX socket.

 https://cve.radiocsirt.org/vuln/gsd-2022-33987 gsd-2022-33987 2026-10-02T20:31:56.773718+00:00 gsd-2022-33987 https://cve.radiocsirt.org/vuln/rhsa-2022:6389 RHSA-2022:6389 — Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security and bug fix update 2026-10-02T20:31:56.773729+00:00

nodejs: DNS rebinding in --inspect via invalid IP addresses nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding nodejs: HTTP request smuggling due to improper delimiting of header fields nodejs: HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding nodejs-got: missing verification of requested URLs allows redirects to UNIX sockets

 https://cve.radiocsirt.org/vuln/rhsa-2022:6448 RHSA-2022:6448 — Red Hat Security Advisory: nodejs:14 security and bug fix update 2026-10-02T20:31:56.773754+00:00

nodejs: DNS rebinding in --inspect via invalid IP addresses nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding nodejs: HTTP request smuggling due to improper delimiting of header fields nodejs: HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding nodejs-got: missing verification of requested URLs allows redirects to UNIX sockets

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-33987 UBUNTU-CVE-2022-33987 2026-10-02T20:31:56.773776+00:00

Affected: Ubuntu:18.04:LTS: node-got, Ubuntu:20.04:LTS: node-got, Ubuntu:22.04:LTS: node-got, Ubuntu:24.04:LTS: node-got, Ubuntu:25.10: node-got, Ubuntu:26.04:LTS: node-got

The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0909 WID-SEC-W-2022-0909 — IBM DB2: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-02T20:31:56.773801+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Dateien zu manipulieren.