https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:22:03.214428+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0073 certfr-2023-avi-0073 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T04:22:03.358487+00:00 certfr-2023-avi-0073 https://cve.radiocsirt.org/vuln/euvd-2026-198233 EUVD-2026-198233 2026-10-03T04:22:03.358541+00:00 EUVD-2026-198233 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37601 fkie_cve-2022-37601 2026-10-03T04:22:03.358558+00:00

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.

 https://cve.radiocsirt.org/vuln/ghsa-76p3-8jx3-jpfq GHSA-76p3-8jx3-jpfq — Prototype pollution in webpack loader-utils 2026-10-03T04:22:03.358587+00:00

Affected: npm: loader-utils

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils prior to version 2.0.3 via the name variable in parseQuery.js.

 https://cve.radiocsirt.org/vuln/gsd-2022-37601 gsd-2022-37601 2026-10-03T04:22:03.358611+00:00 gsd-2022-37601 https://cve.radiocsirt.org/vuln/msrc_cve-2022-37601 msrc_CVE-2022-37601 — Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable… 2026-10-03T04:22:03.358622+00:00 msrc_CVE-2022-37601 https://cve.radiocsirt.org/vuln/rhsa-2023:0264 RHSA-2023:0264 — Red Hat Security Advisory: Red Hat OpenShift (Logging Subsystem) security update 2026-10-03T04:22:03.358639+00:00

jackson-databind: denial of service via a large depth of nested objects golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters golang: net/http: handle server errors after sending GOAWAY golang: net/url: JoinPath does not strip relative path components in all circumstances loader-utils: prototype pollution in function parseQuery in parseQuery.js golang: regexp/syntax: limit memory used by parsing regexps jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays

 https://cve.radiocsirt.org/vuln/rhsa-2023:6420 RHSA-2023:6420 — Red Hat Security Advisory: grafana security and enhancement update 2026-10-03T04:22:03.358670+00:00

grafana: persistent xss in grafana core plugins grafana: plugin signature bypass grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins loader-utils: prototype pollution in function parseQuery in parseQuery.js grafana: Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins grafana: email addresses and usernames cannot be trusted grafana: User enumeration via forget password grafana: Spoofing of the originalUrl parameter of snapshots golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests grafana: account takeover possible when using Azure AD OAuth golang: net/http, net/textproto: denial of service from excessive memory allocation

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-37601 UBUNTU-CVE-2022-37601 2026-10-03T04:22:03.358701+00:00

Affected: Ubuntu:18.04:LTS: node-loader-utils, Ubuntu:20.04:LTS: node-loader-utils, Ubuntu:22.04:LTS: node-loader-utils, Ubuntu:24.04:LTS: node-loader-utils, Ubuntu:25.10: node-loader-utils, Ubuntu:26.04:LTS: node-loader-utils

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0157 WID-SEC-W-2023-0157 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-03T04:22:03.358728+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen Informationen offenzulegen oder einen Denial of Service zu verursachen.