https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:41:48.909923+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06028 bdu:2024-06028 2026-10-03T01:41:49.038669+00:00 bdu:2024-06028 https://cve.radiocsirt.org/vuln/bit-vault-2023-5077 BIT-vault-2023-5077 — Vault's Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets 2026-10-03T01:41:49.038732+00:00

Affected: Bitnami: vault

The Vault and Vault Enterprise ("Vault") Google Cloud secrets engine did not preserve existing Google Cloud IAM Conditions upon creating or updating rolesets. Fixed in Vault 1.13.0.

 https://cve.radiocsirt.org/vuln/euvd-2026-189452 EUVD-2026-189452 2026-10-03T01:41:49.038791+00:00 EUVD-2026-189452 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5077 fkie_cve-2023-5077 2026-10-03T01:41:49.038813+00:00

The Vault and Vault Enterprise ("Vault") Google Cloud secrets engine did not preserve existing Google Cloud IAM Conditions upon creating or updating rolesets. Fixed in Vault 1.13.0.

 https://cve.radiocsirt.org/vuln/ghsa-86c6-3g63-5w64 GHSA-86c6-3g63-5w64 — Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability 2026-10-03T01:41:49.038849+00:00

Affected: Go: github.com/hashicorp/vault

The Vault and Vault Enterprise ("Vault") Google Cloud secrets engine did not preserve existing Google Cloud IAM Conditions upon creating or updating rolesets. Fixed in Vault 1.13.0.

 https://cve.radiocsirt.org/vuln/gsd-2023-5077 gsd-2023-5077 2026-10-03T01:41:49.038883+00:00 gsd-2023-5077 https://cve.radiocsirt.org/vuln/rhsa-2023:6832 RHSA-2023:6832 — Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.0 security, enhancement & bug fix update 2026-10-03T01:41:49.038907+00:00

lapack: Out-of-bounds read in *larrv golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding hashicorp: html injection into web ui Hashicorp/vault: Vault’s LDAP Auth Method Allows for User Enumeration golang.org/x/net/html: Cross site scripting hashicorp/vault: Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets golang: net/http, net/textproto: denial of service from excessive memory allocation golang: html/template: improper sanitization of CSS values golang: html/template: improper handling of empty HTML attributes goproxy: Denial of service (DoS) via unspecified vectors. golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2513 WID-SEC-W-2023-2513 — Hashicorp Vault: Mehrere Schwachstellen 2026-10-03T01:41:49.038981+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder Sicherheitsmaßnahmen zu umgehen.