https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:23:04.997428+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06183 bdu:2025-06183 2026-10-03T00:23:05.005042+00:00 bdu:2025-06183 https://cve.radiocsirt.org/vuln/bit-vault-2023-2121 BIT-vault-2023-2121 — Vault’s KV Diff Viewer Allowed for HTML Injection 2026-10-03T00:23:05.005078+00:00

Affected: Bitnami: vault

Vault and Vault Enterprise's (Vault) key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI through key values. This vulnerability, CVE-2023-2121, is fixed in Vault 1.14.0, 1.13.3, 1.12.7, and 1.11.11.

 https://cve.radiocsirt.org/vuln/euvd-2026-209187 EUVD-2026-209187 2026-10-03T00:23:05.005112+00:00 EUVD-2026-209187 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2121 fkie_cve-2023-2121 2026-10-03T00:23:05.005126+00:00

Vault and Vault Enterprise's (Vault) key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI through key values. This vulnerability, CVE-2023-2121, is fixed in Vault 1.14.0, 1.13.3, 1.12.7, and 1.11.11.

 https://cve.radiocsirt.org/vuln/ghsa-gq98-53rq-qr5h GHSA-gq98-53rq-qr5h — Hashicorp Vault vulnerable to Cross-site Scripting 2026-10-03T00:23:05.005147+00:00

Affected: Go: github.com/hashicorp/vault

Vault and Vault Enterprise's (Vault) key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI through key values. This vulnerability, CVE-2023-2121, is fixed in Vault 1.14.0, 1.13.3, 1.12.7, and 1.11.11.

 https://cve.radiocsirt.org/vuln/gsd-2023-2121 gsd-2023-2121 2026-10-03T00:23:05.005168+00:00 gsd-2023-2121 https://cve.radiocsirt.org/vuln/rhsa-2023:6832 RHSA-2023:6832 — Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.0 security, enhancement & bug fix update 2026-10-03T00:23:05.005179+00:00

lapack: Out-of-bounds read in *larrv golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding hashicorp: html injection into web ui Hashicorp/vault: Vault’s LDAP Auth Method Allows for User Enumeration golang.org/x/net/html: Cross site scripting hashicorp/vault: Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets golang: net/http, net/textproto: denial of service from excessive memory allocation golang: html/template: improper sanitization of CSS values golang: html/template: improper handling of empty HTML attributes goproxy: Denial of service (DoS) via unspecified vectors. golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1408 WID-SEC-W-2023-1408 — Hashicorp Vault: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-03T00:23:05.005212+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hashicorp Vault ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.