https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:00:05.844476+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0073 certfr-2023-avi-0073 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T22:00:05.952705+00:00 certfr-2023-avi-0073 https://cve.radiocsirt.org/vuln/euvd-2026-259077 EUVD-2026-259077 2026-10-02T22:00:05.952759+00:00 EUVD-2026-259077 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37599 fkie_cve-2022-37599 2026-10-02T22:00:05.952784+00:00

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.

 https://cve.radiocsirt.org/vuln/ghsa-hhq3-ff78-jv3g GHSA-hhq3-ff78-jv3g — loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) 2026-10-02T22:00:05.952836+00:00

Affected: npm: loader-utils

A regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils via the resourcePath variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take a disproportional amount of time to process. This issue has been patched in versions 1.4.2, 2.0.4 and 3.2.1.

 https://cve.radiocsirt.org/vuln/gsd-2022-37599 gsd-2022-37599 2026-10-02T22:00:05.952873+00:00 gsd-2022-37599 https://cve.radiocsirt.org/vuln/rhsa-2023:4983 RHSA-2023:4983 — Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.4 security update 2026-10-02T22:00:05.952889+00:00

mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server wildfly-elytron: possible timing attacks via use of unsafe comparator protobuf-java: timeout in parser leads to DoS protobuf-java: Textformat parsing issue leads to DoS protobuf-java: Message-Type Extensions parsing issue leads to DoS undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Denial of Service due to missing nested depth limitation for collections loader-utils: regular expression denial of service in interpolateName.js decode-uri-component: improper input validation resulting in DoS woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks dev-java/snakeyaml: DoS via stack overflow Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing mina-sshd: Java unsafe deserialization vulnerability RESTEasy: creation of insecure temp files springframework: Security Bypass With Un-Prefixed Double Wildcard Pattern springframework: Spring Expression DoS Vulnerability spring-boot: Spring Boot Welcome Page DoS Vulnerability FileUpload: FileUpload DoS with excessive parts

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-37599 UBUNTU-CVE-2022-37599 2026-10-02T22:00:05.952961+00:00

Affected: Ubuntu:18.04:LTS: node-loader-utils, Ubuntu:20.04:LTS: node-loader-utils, Ubuntu:22.04:LTS: node-loader-utils, Ubuntu:24.04:LTS: node-loader-utils, Ubuntu:25.10: node-loader-utils, Ubuntu:26.04:LTS: node-loader-utils

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0809 WID-SEC-W-2023-0809 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-02T22:00:05.953007+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.