https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:12:47.996870+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0523 certfr-2026-avi-0523 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T03:12:48.231433+00:00 certfr-2026-avi-0523 https://cve.radiocsirt.org/vuln/cleanstart-2026-is78920 CLEANSTART-2026-IS78920 — Security fix for CVE-2025-15599 applied in: opensearch-dashboards-fips 3.5.0-r1 2026-10-03T03:12:48.231487+00:00

Affected: CleanStart: opensearch-dashboards-fips

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-274104 EUVD-2026-274104 2026-10-03T03:12:48.231529+00:00 EUVD-2026-274104 https://cve.radiocsirt.org/vuln/fkie_cve-2025-15599 fkie_cve-2025-15599 2026-10-03T03:12:48.231549+00:00

DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing textarea rawtext element validation in the SAFE_FOR_XML regex. Attackers can include closing rawtext tags like </textarea> in attribute values to break out of rawtext contexts and execute JavaScript when sanitized output is placed inside rawtext elements. The 3.x branch was fixed in 3.2.7; the 2.x branch was never patched.

 https://cve.radiocsirt.org/vuln/ghsa-v8jm-5vwx-cfxm GHSA-v8jm-5vwx-cfxm — DOMPurify contains a Cross-site Scripting vulnerability 2026-10-03T03:12:48.231585+00:00

Affected: npm: dompurify

DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing textarea rawtext element validation in the SAFE_FOR_XML regex. Attackers can include closing rawtext tags like </textarea> in attribute values to break out of rawtext contexts and execute JavaScript when sanitized output is placed inside rawtext elements. The 3.x branch was fixed in 3.2.7; the 2.x branch was never patched.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-15599 UBUNTU-CVE-2025-15599 2026-10-03T03:12:48.231621+00:00

Affected: Ubuntu:22.04:LTS: node-dompurify, Ubuntu:24.04:LTS: node-dompurify, Ubuntu:25.10: node-dompurify, Ubuntu:26.04:LTS: node-dompurify

DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing textarea rawtext element validation in the SAFE_FOR_XML regex. Attackers can include closing rawtext tags like </textarea> in attribute values to break out of rawtext contexts and execute JavaScript when sanitized output is placed inside rawtext elements. The 3.x branch was fixed in 3.2.7; the 2.x branch was never patched.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1007 WID-SEC-W-2026-1007 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-03T03:12:48.231660+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.