https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:39:02.865349+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05169 bdu:2023-05169 2026-10-02T19:39:03.238769+00:00 bdu:2023-05169 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0484 certfr-2023-avi-0484 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-02T19:39:03.238814+00:00 certfr-2023-avi-0484 https://cve.radiocsirt.org/vuln/euvd-2026-8348 EUVD-2026-8348 2026-10-02T19:39:03.238834+00:00 EUVD-2026-8348 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28155 fkie_cve-2023-28155 2026-10-02T19:39:03.238847+00:00

The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/ghsa-p8p7-x288-28g6 GHSA-p8p7-x288-28g6 — Server-Side Request Forgery in Request 2026-10-02T19:39:03.238877+00:00

Affected: npm: request, npm: @cypress/request

The `request` package through 2.88.2 for Node.js and the `@cypress/request` package prior to 3.0.0 allow a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP).

NOTE: The `request` package is no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/gsd-2023-28155 gsd-2023-28155 2026-10-02T19:39:03.238906+00:00 gsd-2023-28155 https://cve.radiocsirt.org/vuln/msrc_cve-2023-28155 msrc_CVE-2023-28155 — The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server th… 2026-10-02T19:39:03.238918+00:00 msrc_CVE-2023-28155 https://cve.radiocsirt.org/vuln/rhsa-2026:62115 RHSA-2026:62115 — Red Hat Security Advisory: Red Hat Ceph Storage 2026-10-02T19:39:03.238936+00:00

taffy: taffydb: Internal Property Tampering containerd: OCI image importer memory exhaustion request: bypass of SSRF mitigations when following a cross-protocol redirect npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation urllib3: urllib3 does not control redirects in browsers and Node.js ip: Node ip SSRF urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28155 UBUNTU-CVE-2023-28155 2026-10-02T19:39:03.238964+00:00

Affected: Ubuntu:14.04:LTS: node-request, Ubuntu:16.04:LTS: node-request, Ubuntu:18.04:LTS: node-request, Ubuntu:20.04:LTS: node-request, Ubuntu:22.04:LTS: node-request, Ubuntu:24.04:LTS: node-request

The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1800 WID-SEC-W-2023-1800 — HCL BigFix: Mehrere Schwachstellen 2026-10-02T19:39:03.238993+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL BigFix WebUI ausnutzen, um seine Privilegien zu erweitern, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.