https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:34:51.194335+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06002 bdu:2024-06002 2026-10-03T00:34:51.200317+00:00 bdu:2024-06002 https://cve.radiocsirt.org/vuln/euvd-2026-261559 EUVD-2026-261559 2026-10-03T00:34:51.200349+00:00 EUVD-2026-261559 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6535 fkie_cve-2024-6535 2026-10-03T00:34:51.200363+00:00

A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie.

 https://cve.radiocsirt.org/vuln/ghsa-w799-v85j-88pg GHSA-w799-v85j-88pg — Skupper uses a static cookie secret for the openshift oauth-proxy 2026-10-03T00:34:51.200391+00:00

Affected: Go: github.com/skupperproject/skupper

A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie.

 https://cve.radiocsirt.org/vuln/rhsa-2024:4865 RHSA-2024:4865 — Red Hat Security Advisory: Red Hat Service Interconnect security update 2026-10-03T00:34:51.200413+00:00

python: Path traversal on tempfile.TemporaryDirectory python: The zipfile module is vulnerable to zip-bombs leading to denial of service skupper: potential authentication bypass to skupper console via forged cookies