https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:18:40.698556+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08556 bdu:2025-08556 2026-10-03T03:18:40.851064+00:00 bdu:2025-08556 https://cve.radiocsirt.org/vuln/bell-cve-2025-22874 BELL-CVE-2025-22874 2026-10-03T03:18:40.851116+00:00

Affected: Alpaquita:23: go, Alpaquita:25: go, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:25: go, BellSoft Hardened Containers:stream: go

 https://cve.radiocsirt.org/vuln/bit-golang-2025-22874 BIT-golang-2025-22874 — Usage of ExtKeyUsageAny disables policy validation in crypto/x509 2026-10-03T03:18:40.851157+00:00

Affected: Bitnami: golang

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 certfr-2025-avi-0622 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-03T03:18:40.851184+00:00 certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/euvd-2026-244453 EUVD-2026-244453 2026-10-03T03:18:40.851200+00:00 EUVD-2026-244453 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22874 fkie_cve-2025-22874 2026-10-03T03:18:40.851211+00:00

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

 https://cve.radiocsirt.org/vuln/ghsa-6f52-wpx2-hvf2 GHSA-6f52-wpx2-hvf2 2026-10-03T03:18:40.851252+00:00

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-22874 msrc_CVE-2025-22874 — Usage of ExtKeyUsageAny disables policy validation in crypto/x509 2026-10-03T03:18:40.851279+00:00 msrc_CVE-2025-22874 https://cve.radiocsirt.org/vuln/oesa-2026-4067 OESA-2026-4067 — git-lfs security update 2026-10-03T03:18:40.851313+00:00

Affected: openEuler:24.03-LTS-SP3: git-lfs

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es):

Processing an incomplete post-handshake message for a QUIC connection can cause a panic.(CVE-2023-39321)

QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size.(CVE-2023-39322)

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.(CVE-2025-22874)

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links exist which collide with the paths of files tracked by Git LFS. The git lfs checkout and git lfs pull commands do not check for symbolic links before writing to files in the working tree, allowing an attacker to craft a repository containing symbolic or hard links that cause Git LFS to write to arbitrary file system locations accessible to the user running these comman…

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15224-1 openSUSE-SU-2025:15224-1 — go1.24-1.24.4-1.1 on GA media 2026-10-03T03:18:40.851363+00:00

go1.24-1.24.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:10677 RHSA-2025:10677 — Red Hat Security Advisory: golang security update 2026-10-03T03:18:40.851381+00:00

net/http: Sensitive headers not cleared on cross-origin redirect in net/http crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-22874 UBUNTU-CVE-2025-22874 2026-10-03T03:18:40.851399+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.8 and 22 more

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1205 WID-SEC-W-2025-1205 — Golang Go: Mehrere Schwachstellen 2026-10-03T03:18:40.851458+00:00

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder weitere nicht spezifizierte Auswirkungen zu erziehlen.