https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:20:28.945134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0063 certfr-2023-avi-0063 — Une vulnérabilité a été découverte dans Grafana. Elle permet à un attaquant de provoquer une élévation de privilèges. 2026-10-03T06:20:29.112510+00:00 certfr-2023-avi-0063 https://cve.radiocsirt.org/vuln/euvd-2026-233386 EUVD-2026-233386 2026-10-03T06:20:29.112559+00:00 EUVD-2026-233386 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41912 fkie_cve-2022-41912 2026-10-03T06:20:29.112578+00:00

The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading to a fixed version.

 https://cve.radiocsirt.org/vuln/ghsa-j2jp-wvqg-wc2g GHSA-j2jp-wvqg-wc2g — crewjam/saml vulnerable to signature bypass via multiple Assertion elements due to improper authentication 2026-10-03T06:20:29.112608+00:00

Affected: Go: github.com/crewjam/saml

### Impact

The crewjam/saml go library is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements.

### Patches

This issue has been corrected in version 0.4.9.

### Credit

This issue was reported by Felix Wilhelm from Google Project Zero.

 https://cve.radiocsirt.org/vuln/gsd-2022-41912 gsd-2022-41912 2026-10-03T06:20:29.112638+00:00 gsd-2022-41912 https://cve.radiocsirt.org/vuln/rhsa-2022:9040 RHSA-2022:9040 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.3 security update 2026-10-03T06:20:29.112651+00:00

nodejs-minimatch: ReDoS via the braceExpand function crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-41912 UBUNTU-CVE-2022-41912 2026-10-03T06:20:29.112670+00:00

Affected: Ubuntu:22.04:LTS: golang-github-crewjam-saml

The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading to a fixed version.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2338 WID-SEC-W-2022-2338 — Red Hat Enterprise Linux (Advanced Cluster Management): Mehrere Schwachstellen 2026-10-03T06:20:29.112689+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Advanced Cluster Management ausnutzen, um einen Denial of Service Angriff durchzuführen oder die Authentisierung zu umgehen.