https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:23:52.728841+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0073 certfr-2023-avi-0073 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T14:23:52.897442+00:00 certfr-2023-avi-0073 https://cve.radiocsirt.org/vuln/euvd-2026-239490 EUVD-2026-239490 2026-10-02T14:23:52.897520+00:00 EUVD-2026-239490 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37603 fkie_cve-2022-37603 2026-10-02T14:23:52.897537+00:00

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.

 https://cve.radiocsirt.org/vuln/ghsa-3rfm-jhwj-7488 GHSA-3rfm-jhwj-7488 — loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable 2026-10-02T14:23:52.897567+00:00

Affected: npm: loader-utils

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take a disproportional amount of time to process. This issue has been patched in versions 1.4.2, 2.0.4 and 3.2.1.

 https://cve.radiocsirt.org/vuln/gsd-2022-37603 gsd-2022-37603 2026-10-02T14:23:52.897595+00:00 gsd-2022-37603 https://cve.radiocsirt.org/vuln/msrc_cve-2022-37603 msrc_CVE-2022-37603 — A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webp… 2026-10-02T14:23:52.897606+00:00 msrc_CVE-2022-37603 https://cve.radiocsirt.org/vuln/rhsa-2022:8781 RHSA-2022:8781 — Red Hat Security Advisory: Logging Subsystem 5.5.5 - Red Hat OpenShift security update 2026-10-02T14:23:52.897622+00:00

jackson-databind: denial of service via a large depth of nested objects golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters golang: net/http: handle server errors after sending GOAWAY golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service loader-utils: Regular expression denial of service golang: regexp/syntax: limit memory used by parsing regexps jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-37603 UBUNTU-CVE-2022-37603 2026-10-02T14:23:52.897651+00:00

Affected: Ubuntu:18.04:LTS: node-loader-utils, Ubuntu:20.04:LTS: node-loader-utils, Ubuntu:22.04:LTS: node-loader-utils, Ubuntu:24.04:LTS: node-loader-utils, Ubuntu:25.10: node-loader-utils, Ubuntu:26.04:LTS: node-loader-utils

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0809 WID-SEC-W-2023-0809 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-02T14:23:52.897678+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.