https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:05:16.654502+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-02476 bdu:2025-02476 2026-10-02T13:05:17.428982+00:00 bdu:2025-02476 https://cve.radiocsirt.org/vuln/bell-cve-2025-22870 BELL-CVE-2025-22870 2026-10-02T13:05:17.429046+00:00

Affected: Alpaquita:23: go, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:stream: go

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0256 certfr-2025-avi-0256 — De multiples vulnérabilités ont été découvertes dans Broadcom VMware Tanzu Greenplum. Elles permettent à un attaquant d… 2026-10-02T13:05:17.429082+00:00 certfr-2025-avi-0256 https://cve.radiocsirt.org/vuln/cleanstart-2026-ba61304 Withdrawn: CLEANSTART-2026-BA61304 — Security fixes in cosign 2.4.3-r0 2026-10-02T13:05:17.429099+00:00

Withdrawn by the publisher.

Affected: CleanStart: cosign

Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...

 https://cve.radiocsirt.org/vuln/euvd-2026-291791 EUVD-2026-291791 2026-10-02T13:05:17.429123+00:00 EUVD-2026-291791 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22870 fkie_cve-2025-22870 2026-10-02T13:05:17.429134+00:00

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

 https://cve.radiocsirt.org/vuln/ghsa-qxp5-gwg8-xv66 GHSA-qxp5-gwg8-xv66 — HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 2026-10-02T13:05:17.429158+00:00

Affected: Go: golang.org/x/net

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-22870 msrc_CVE-2025-22870 — HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 2026-10-02T13:05:17.429179+00:00 msrc_CVE-2025-22870 https://cve.radiocsirt.org/vuln/oesa-2025-1427 OESA-2025-1427 — golang security update 2026-10-02T13:05:17.429196+00:00

Affected: openEuler:24.03-LTS: golang, openEuler:24.03-LTS-SP1: golang, openEuler:20.03-LTS-SP4: golang, openEuler:22.03-LTS-SP3: golang, openEuler:22.03-LTS-SP4: golang

. Security Fix(es):

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.(CVE-2025-22870)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14855-1 openSUSE-SU-2025:14855-1 — go1.23-1.23.7-1.1 on GA media 2026-10-02T13:05:17.429224+00:00

go1.23-1.23.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:14090 RHSA-2025:14090 — Red Hat Security Advisory: Red Hat Developer Hub 1.7.0 release. 2026-10-02T13:05:17.429240+00:00

rhdh: Red Hat Developer Hub user permissions pbkdf2: pbkdf2 silently returns predictable key material multer: Multer Denial of Service golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware tar-fs: tar-fs has issue where extract can write outside the specified dir with a specific tarball multer: Multer vulnerable to Denial of Service via unhandled exception @node-saml/node-saml: Node-SAML Signature Verification Vulnerability

 https://cve.radiocsirt.org/vuln/suse-el-9-client-tools-2026-2254 SUSE-EL-9-CLIENT-TOOLS-2026-2254 — Security update 5.0.8 for Multi-Linux Manager Client Tools 2026-10-02T13:05:17.429269+00:00

Security update 5.0.8 for Multi-Linux Manager Client Tools

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-22870 UBUNTU-CVE-2025-22870 2026-10-02T13:05:17.429284+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.8 and 24 more

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0485 WID-SEC-W-2025-0485 — Golang Go: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-02T13:05:17.429341+00:00

Ein Angreifer kann eine Schwachstelle in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen.