https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:42:58.644206+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04366 bdu:2024-04366 2026-10-04T17:42:58.656688+00:00 bdu:2024-04366 https://cve.radiocsirt.org/vuln/euvd-2026-258428 EUVD-2026-258428 2026-10-04T17:42:58.656739+00:00 EUVD-2026-258428 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32668 fkie_cve-2023-32668 2026-10-04T17:42:58.656765+00:00

LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

 https://cve.radiocsirt.org/vuln/ghsa-hm67-jh95-48xh GHSA-hm67-jh95-48xh 2026-10-04T17:42:58.656797+00:00

LuaTeX before 1.17.0 enables the socket library by default.

 https://cve.radiocsirt.org/vuln/gsd-2023-32668 gsd-2023-32668 2026-10-04T17:42:58.656812+00:00 gsd-2023-32668 https://cve.radiocsirt.org/vuln/oesa-2025-2694 OESA-2025-2694 — texlive-base security update 2026-10-04T17:42:58.656824+00:00

Affected: openEuler:24.03-LTS-SP2: texlive-base, openEuler:20.03-LTS-SP4: texlive-base, openEuler:22.03-LTS-SP3: texlive-base, openEuler:22.03-LTS-SP4: texlive-base, openEuler:24.03-LTS: texlive-base, openEuler:24.03-LTS-SP1: texlive-base

The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries. Security Fix(es):

LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.(CVE-2023-32668)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12936-1 openSUSE-SU-2024:12936-1 — libkpathsea6-6.3.5-90.1 on GA media 2026-10-04T17:42:58.656856+00:00

libkpathsea6-6.3.5-90.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-32668 UBUNTU-CVE-2023-32668 2026-10-04T17:42:58.656875+00:00

Affected: Ubuntu:Pro:16.04:LTS: texlive-bin, Ubuntu:Pro:18.04:LTS: texlive-bin, Ubuntu:20.04:LTS: texlive-bin, Ubuntu:22.04:LTS: texlive-bin

LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.