https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:43:52.258112+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-09092 bdu:2024-09092 2026-10-04T01:43:52.876312+00:00 bdu:2024-09092 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0249 certfr-2026-avi-0249 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T01:43:52.876384+00:00 certfr-2026-avi-0249 https://cve.radiocsirt.org/vuln/euvd-2026-258186 EUVD-2026-258186 2026-10-04T01:43:52.876406+00:00 EUVD-2026-258186 https://cve.radiocsirt.org/vuln/fkie_cve-2024-48910 fkie_cve-2024-48910 2026-10-04T01:43:52.876419+00:00

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2.

 https://cve.radiocsirt.org/vuln/ghsa-p3vf-v8qc-cwcr GHSA-p3vf-v8qc-cwcr — DOMPurify vulnerable to tampering by prototype polution 2026-10-04T01:43:52.876448+00:00

Affected: npm: dompurify

dompurify was vulnerable to prototype pollution

Fixed by https://github.com/cure53/DOMPurify/commit/d1dd0374caef2b4c56c3bd09fe1988c3479166dc

 https://cve.radiocsirt.org/vuln/rhsa-2024:10186 RHSA-2024:10186 — Red Hat Security Advisory: ACS 4.5 enhancement update 2026-10-04T01:43:52.876473+00:00

cross-spawn: regular expression denial of service golang: archive/zip: Incorrect handling of certain ZIP files golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion body-parser: Denial of Service Vulnerability in body-parser dompurify: DOMPurify vulnerable to tampering by prototype pollution

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-48910 UBUNTU-CVE-2024-48910 2026-10-04T01:43:52.876500+00:00

Affected: Ubuntu:22.04:LTS: node-dompurify

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3338 WID-SEC-W-2024-3338 — Red Hat OpenShift: Mehrere Schwachstelle 2026-10-04T01:43:52.876518+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Red Hat OpenShift ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und beliebigen Code auszuführen.