https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:50:04.901952+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-10615 bdu:2025-10615 2026-10-03T23:50:05.072738+00:00 bdu:2025-10615 https://cve.radiocsirt.org/vuln/brew-serveit-cve-2024-47220 BREW-serveit-CVE-2024-47220 — HTTP Request Smuggling in ruby webrick 2026-10-03T23:50:05.072789+00:00

Affected: Homebrew: serveit

An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., "GET /admin HTTP/1.1\r\n" inside of a "POST /user HTTP/1.1\r\n" request. NOTE: the supplier's position is "Webrick should not be used in production."

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0003 certfr-2025-avi-0003 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T23:50:05.072839+00:00 certfr-2025-avi-0003 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47220 fkie_cve-2024-47220 2026-10-03T23:50:05.072873+00:00

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

 https://cve.radiocsirt.org/vuln/ghsa-6f62-3596-g6w7 GHSA-6f62-3596-g6w7 — HTTP Request Smuggling in ruby webrick 2026-10-03T23:50:05.072899+00:00

Affected: RubyGems: webrick

An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., "GET /admin HTTP/1.1\r\n" inside of a "POST /user HTTP/1.1\r\n" request. NOTE: the supplier's position is "Webrick should not be used in production."

 https://cve.radiocsirt.org/vuln/oesa-2024-2226 OESA-2024-2226 — rubygem-webrick security update 2026-10-03T23:50:05.072922+00:00

Affected: openEuler:24.03-LTS: rubygem-webrick, openEuler:22.03-LTS-SP4: rubygem-webrick, openEuler:22.03-LTS-SP3: rubygem-webrick, openEuler:20.03-LTS-SP4: rubygem-webrick, openEuler:22.03-LTS-SP1: rubygem-webrick

WEBrick is an HTTP server toolkit that can be configured as an HTTPS server, a proxy server, and a virtual-host server. Security Fix(es): An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., "GET /admin HTTP/1.1\r\n" inside of a "POST /user HTTP/1.1\r\n" request. NOTE: the supplier's position is "Webrick should not be used in production."(CVE-2024-47220)

 https://cve.radiocsirt.org/vuln/rhsa-2025:1227 RHSA-2025:1227 — Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.11 2026-10-03T23:50:05.072952+00:00

rsync: Info Leak via Uninitialized Stack Contents WEBrick: HTTP request smuggling

 https://cve.radiocsirt.org/vuln/suse-su-2024:3939-1 SUSE-SU-2024:3939-1 — Security update for ruby2.1 2026-10-03T23:50:05.072972+00:00

Security update for ruby2.1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-47220 UBUNTU-CVE-2024-47220 2026-10-03T23:50:05.072987+00:00

Affected: Ubuntu:Pro:16.04:LTS: ruby2.3, Ubuntu:Pro:18.04:LTS: ruby2.5, Ubuntu:Pro:20.04:LTS: ruby2.7, Ubuntu:22.04:LTS: ruby-webrick, Ubuntu:24.04:LTS: ruby-webrick, Ubuntu:25.10: ruby-webrick

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0001 WID-SEC-W-2025-0001 — IBM DB2: Mehrere Schwachstellen 2026-10-03T23:50:05.073012+00:00

Ein entfernter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 on Cloud Pak for Data ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.