https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:57:18.615642+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05172 bdu:2023-05172 2026-10-02T14:57:18.732570+00:00 bdu:2023-05172 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0705 certfr-2023-avi-0705 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-02T14:57:18.732632+00:00 certfr-2023-avi-0705 https://cve.radiocsirt.org/vuln/euvd-2026-251090 EUVD-2026-251090 2026-10-02T14:57:18.732652+00:00 EUVD-2026-251090 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26136 fkie_cve-2023-26136 2026-10-02T14:57:18.732664+00:00

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.

 https://cve.radiocsirt.org/vuln/ghsa-72xf-g2v4-qvf3 GHSA-72xf-g2v4-qvf3 — tough-cookie Prototype Pollution vulnerability 2026-10-02T14:57:18.732693+00:00

Affected: npm: tough-cookie

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in `rejectPublicSuffixes=false` mode. This issue arises from the manner in which the objects are initialized.

 https://cve.radiocsirt.org/vuln/gsd-2023-26136 gsd-2023-26136 2026-10-02T14:57:18.732716+00:00 gsd-2023-26136 https://cve.radiocsirt.org/vuln/icsa-24-200-02 ICSA-24-200-02 — Subnet Solutions PowerSYSTEM Center 2026-10-02T14:57:18.732728+00:00

Subnet PowerSYSTEM Center products are vulnerable to a prototype pollution vulnerability, which may allow an authenticated attacker to elevate permissions.

 https://cve.radiocsirt.org/vuln/msrc_cve-2023-26136 msrc_CVE-2023-26136 — Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Coo… 2026-10-02T14:57:18.732746+00:00 msrc_CVE-2023-26136 https://cve.radiocsirt.org/vuln/oesa-2023-1930 OESA-2023-1930 — nodejs-tough-cookie security update 2026-10-02T14:57:18.732762+00:00

Affected: openEuler:20.03-LTS-SP1: nodejs-tough-cookie, openEuler:20.03-LTS-SP3: nodejs-tough-cookie, openEuler:22.03-LTS: nodejs-tough-cookie, openEuler:22.03-LTS-SP1: nodejs-tough-cookie, openEuler:22.03-LTS-SP2: nodejs-tough-cookie

RFC6265 Cookies and Cookie Jar for Node.js. Security Fix(es): Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.(CVE-2023-26136)

 https://cve.radiocsirt.org/vuln/rhsa-2023:3998 RHSA-2023:3998 — Red Hat Security Advisory: Logging Subsystem 5.7.3 - Red Hat OpenShift security update 2026-10-02T14:57:18.732789+00:00

word-wrap: ReDoS tough-cookie: prototype pollution in cookie memstore

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-26136 UBUNTU-CVE-2023-26136 2026-10-02T14:57:18.732808+00:00

Affected: Ubuntu:18.04:LTS: node-tough-cookie, Ubuntu:20.04:LTS: node-tough-cookie, Ubuntu:22.04:LTS: node-tough-cookie, Ubuntu:24.04:LTS: node-tough-cookie

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1738 WID-SEC-W-2023-1738 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-02T14:57:18.732831+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Programmcode auszuführen.