https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:41:46.463167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1233 certfr-2026-avi-1233 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T15:41:46.467270+00:00 certfr-2026-avi-1233 https://cve.radiocsirt.org/vuln/euvd-2026-261795 EUVD-2026-261795 2026-10-04T15:41:46.467309+00:00 EUVD-2026-261795 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13466 fkie_cve-2025-13466 2026-10-04T15:41:46.467324+00:00

body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic. This issue is addressed in version 2.2.1.

 https://cve.radiocsirt.org/vuln/ghsa-wqch-xfxh-vrr4 GHSA-wqch-xfxh-vrr4 — body-parser is vulnerable to denial of service when url encoding is used 2026-10-04T15:41:46.467352+00:00

Affected: npm: body-parser

### Impact

body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic.

### Patches

This issue is addressed in version 2.2.1.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-13466 UBUNTU-CVE-2025-13466 2026-10-04T15:41:46.467379+00:00

Affected: Ubuntu:16.04:LTS: node-body-parser, Ubuntu:18.04:LTS: node-body-parser, Ubuntu:20.04:LTS: node-body-parser, Ubuntu:22.04:LTS: node-body-parser, Ubuntu:24.04:LTS: node-body-parser, Ubuntu:25.10: node-body-parser, Ubuntu:26.04:LTS: node-body-parser

body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic. This issue is addressed in version 2.2.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2909 WID-SEC-W-2025-2909 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-04T15:41:46.467408+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um beliebigen Programmcode auszuführen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.