https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:09:31.609833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-209935 EUVD-2026-209935 2026-10-04T18:09:31.664860+00:00 EUVD-2026-209935 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27531 fkie_cve-2023-27531 2026-10-04T18:09:31.664897+00:00

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code

 https://cve.radiocsirt.org/vuln/ghsa-h2wm-p2vg-6pw4 GHSA-h2wm-p2vg-6pw4 — Kredis JSON Possible Deserialization of Untrusted Data Vulnerability 2026-10-04T18:09:31.664927+00:00

Affected: RubyGems: kredis

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code. This vulnerability has been assigned the CVE identifier CVE-2023-27531.

'Not affected: None.' 'Versions Affected: All.' 'Fixed Versions: 1.3.0.1'

Impact Carefully crafted JSON data processed by Kredis may result in deserialization of untrusted data, potentially leading to deserialization of unexpected objects in the system.

Any applications using Kredis with JSON are affected.

Releases The fixed releases are available at the normal locations.

Workarounds There are no feasible workarounds for this issue.

Patches To aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.

* 1-3-0-1-kredis.patch - Patch for 1.3.0 series

Credits Thank you ooooooo_k 7 for reporting this!

 https://cve.radiocsirt.org/vuln/gsd-2023-27531 gsd-2023-27531 2026-10-04T18:09:31.664968+00:00 gsd-2023-27531 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0632 WID-SEC-W-2023-0632 — Ruby on Rails: Mehrere Schwachstellen 2026-10-04T18:09:31.664980+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, unbekannte Auswirkungen zu verursachen oder einen Denial of Service Zustand herbeizuführen.