https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T09:46:50.122351+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-204716 EUVD-2026-204716 2026-10-25T09:46:50.126119+00:00 EUVD-2026-204716 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45311 fkie_cve-2023-45311 2026-10-25T09:46:50.126153+00:00

fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project (that depends on fsevents) distributes code that was obtained from that URL at a time when it was controlled by an adversary. NOTE: some sources feel that this means that no version is affected any longer, because the URL is not controlled by an adversary.

 https://cve.radiocsirt.org/vuln/ghsa-8r6j-v8pm-fqw3 GHSA-8r6j-v8pm-fqw3 — Code injection in fsevents 2026-10-25T09:46:50.126183+00:00

Affected: npm: fsevents

fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project (that depends on fsevents) distributes code that was obtained from that URL at a time when it was controlled by an adversary.

 https://cve.radiocsirt.org/vuln/gsd-2023-45311 gsd-2023-45311 2026-10-25T09:46:50.126207+00:00 gsd-2023-45311 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45311 UBUNTU-CVE-2023-45311 2026-10-25T09:46:50.126219+00:00

Affected: Ubuntu:14.04:LTS: npm, Ubuntu:Pro:16.04:LTS: npm, Ubuntu:Pro:18.04:LTS: npm, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src, Ubuntu:20.04:LTS: npm, Ubuntu:Pro:20.04:LTS: qtwebengine-opensource-src, Ubuntu:22.04:LTS: npm, Ubuntu:Pro:22.04:LTS: qtwebengine-opensource-src, Ubuntu:24.04:LTS: npm, Ubuntu:Pro:24.04:LTS: qtwebengine-opensource-src and 6 more

fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project (that depends on fsevents) distributes code that was obtained from that URL at a time when it was controlled by an adversary. NOTE: some sources feel that this means that no version is affected any longer, because the URL is not controlled by an adversary.