https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:39:10.718185+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02261 bdu:2024-02261 2026-10-02T13:39:10.756363+00:00 bdu:2024-02261 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0199 certfr-2024-avi-0199 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-02T13:39:10.756406+00:00 certfr-2024-avi-0199 https://cve.radiocsirt.org/vuln/euvd-2026-239672 EUVD-2026-239672 2026-10-02T13:39:10.756426+00:00 EUVD-2026-239672 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42282 fkie_cve-2023-42282 2026-10-02T13:39:10.756439+00:00

The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.

 https://cve.radiocsirt.org/vuln/ghsa-78xj-cgh5-2h22 GHSA-78xj-cgh5-2h22 — NPM IP package incorrectly identifies some private IP addresses as public 2026-10-02T13:39:10.756466+00:00

Affected: npm: ip

The `isPublic()` function in the NPM package `ip` doesn't correctly identify certain private IP addresses in uncommon formats such as `0x7F.1` as private. Instead, it reports them as public by returning `true`. This can lead to security issues such as Server-Side Request Forgery (SSRF) if `isPublic()` is used to protect sensitive code paths when passed user input. Versions 1.1.9 and 2.0.1 fix the issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-42282 gsd-2023-42282 2026-10-02T13:39:10.756492+00:00 gsd-2023-42282 https://cve.radiocsirt.org/vuln/msrc_cve-2023-42282 msrc_CVE-2023-42282 — The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly cate… 2026-10-02T13:39:10.756504+00:00 msrc_CVE-2023-42282 https://cve.radiocsirt.org/vuln/rhba-2024:1440 RHBA-2024:1440 — Red Hat Bug Fix Advisory: MTV 2.5.6 Images 2026-10-02T13:39:10.756521+00:00

golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests nodejs-ip: arbitrary code execution via the isPublic() function

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42282 UBUNTU-CVE-2023-42282 2026-10-02T13:39:10.756539+00:00

Affected: Ubuntu:Pro:18.04:LTS: node-ip, Ubuntu:Pro:20.04:LTS: node-ip, Ubuntu:Pro:22.04:LTS: node-ip, Ubuntu:24.04:LTS: node-ip

The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0661 WID-SEC-W-2024-0661 — IBM App Connect Enterprise: Schwachstelle ermöglicht Codeausführung und Offenlegung 2026-10-02T13:39:10.756563+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um beliebigen Programmcode auszuführen und Informationen offenzulegen.