https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:29:30.989936+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:8832 ALSA-2022:8832 — Moderate: nodejs:18 security, bug fix, and enhancement update 2026-10-03T03:29:31.524944+00:00

Affected: AlmaLinux:9: nodejs, AlmaLinux:9: nodejs-devel, AlmaLinux:9: nodejs-docs, AlmaLinux:9: nodejs-full-i18n, AlmaLinux:9: nodejs-nodemon, AlmaLinux:9: nodejs-packaging, AlmaLinux:9: nodejs-packaging-bundler, AlmaLinux:9: npm

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (18.12.1). (BZ#2142809, BZ#2142830, BZ#2142834, BZ#2142856)

Security Fix(es):

* nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517) * nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-02699 bdu:2023-02699 2026-10-03T03:29:31.525103+00:00 bdu:2023-02699 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0238 certfr-2023-avi-0238 — De multiples vulnérabilités ont été découvertes dans les produits <span class="textit">IBM</span>. Elles permettent à u… 2026-10-03T03:29:31.525135+00:00 certfr-2023-avi-0238 https://cve.radiocsirt.org/vuln/euvd-2026-239039 EUVD-2026-239039 2026-10-03T03:29:31.525164+00:00 EUVD-2026-239039 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3517 fkie_cve-2022-3517 2026-10-03T03:29:31.525184+00:00

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

 https://cve.radiocsirt.org/vuln/ghsa-f8q6-p94x-37v3 GHSA-f8q6-p94x-37v3 — minimatch ReDoS vulnerability 2026-10-03T03:29:31.525221+00:00

Affected: npm: minimatch

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

 https://cve.radiocsirt.org/vuln/gsd-2022-3517 gsd-2022-3517 2026-10-03T03:29:31.525255+00:00 gsd-2022-3517 https://cve.radiocsirt.org/vuln/ncsc-2026-0325 NCSC-2026-0325 — Kwetsbaarheden verholpen in Atlassian producten 2026-10-03T03:29:31.525273+00:00 NCSC-2026-0325 https://cve.radiocsirt.org/vuln/oesa-2022-2028 OESA-2022-2028 — nodejs-minimatch security update 2026-10-03T03:29:31.525470+00:00

Affected: openEuler:20.03-LTS-SP1: nodejs-minimatch, openEuler:20.03-LTS-SP3: nodejs-minimatch, openEuler:22.03-LTS: nodejs-minimatch

Converts glob expressions to JavaScript &quot;RegExp&quot; objects. Security Fix(es): A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.(CVE-2022-3517)

 https://cve.radiocsirt.org/vuln/rhsa-2022:8832 RHSA-2022:8832 — Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update 2026-10-03T03:29:31.525526+00:00

nodejs-minimatch: ReDoS via the braceExpand function nodejs: DNS rebinding in inspect via invalid octal IP address

 https://cve.radiocsirt.org/vuln/rhsa-2022:9040 RHSA-2022:9040 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.3 security update 2026-10-03T03:29:31.525563+00:00

nodejs-minimatch: ReDoS via the braceExpand function crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3517 UBUNTU-CVE-2022-3517 2026-10-03T03:29:31.525599+00:00

Affected: Ubuntu:18.04:LTS: node-minimatch, Ubuntu:20.04:LTS: node-minimatch

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2338 WID-SEC-W-2022-2338 — Red Hat Enterprise Linux (Advanced Cluster Management): Mehrere Schwachstellen 2026-10-03T03:29:31.525639+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Advanced Cluster Management ausnutzen, um einen Denial of Service Angriff durchzuführen oder die Authentisierung zu umgehen.