https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:38:32.467232+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06866 bdu:2024-06866 2026-10-03T14:38:32.585410+00:00 bdu:2024-06866 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0366 certfr-2024-avi-0366 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-03T14:38:32.585461+00:00 certfr-2024-avi-0366 https://cve.radiocsirt.org/vuln/euvd-2026-158001 EUVD-2026-158001 2026-10-03T14:38:32.585483+00:00 EUVD-2026-158001 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27088 fkie_cve-2024-27088 2026-10-03T14:38:32.585495+00:00

es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to stall. The vulnerability is patched in v0.10.63.

 https://cve.radiocsirt.org/vuln/ghsa-4gmj-3p3h-gm8h GHSA-4gmj-3p3h-gm8h — es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens` 2026-10-03T14:38:32.585524+00:00

Affected: npm: es5-ext

### Impact

Passing functions with very long names or complex default argument names into `function#copy` or`function#toStringTokens` may put script to stall

### Patches Fixed with https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2 and https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602 Published with v0.10.63

### Workarounds No real workaround aside of refraining from using above utilities.

### References https://github.com/medikoo/es5-ext/issues/201

 https://cve.radiocsirt.org/vuln/gsd-2024-27088 gsd-2024-27088 2026-10-03T14:38:32.585553+00:00 gsd-2024-27088 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-27088 UBUNTU-CVE-2024-27088 2026-10-03T14:38:32.585565+00:00

Affected: Ubuntu:18.04:LTS: node-es5-ext, Ubuntu:20.04:LTS: node-es5-ext, Ubuntu:22.04:LTS: node-es5-ext, Ubuntu:24.04:LTS: node-es5-ext, Ubuntu:25.10: node-es5-ext, Ubuntu:26.04:LTS: node-es5-ext

es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to stall. The vulnerability is patched in v0.10.63.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0935 WID-SEC-W-2024-0935 — IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service 2026-10-03T14:38:32.585592+00:00

Ein lokaler Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.