https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:44:32.785280+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:20909 ALSA-2025:20909 — Important: podman security update 2026-10-03T12:44:34.524098+00:00

Affected: AlmaLinux:9: podman, AlmaLinux:9: podman-docker, AlmaLinux:9: podman-plugins, AlmaLinux:9: podman-remote, AlmaLinux:9: podman-tests

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* database/sql: Postgres Scan Race Condition (CVE-2025-47907) * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-10834 bdu:2025-10834 2026-10-03T12:44:34.524193+00:00 bdu:2025-10834 https://cve.radiocsirt.org/vuln/bell-cve-2025-47907 BELL-CVE-2025-47907 2026-10-03T12:44:34.524211+00:00

Affected: Alpaquita:23: go, Alpaquita:25: go, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:25: go, BellSoft Hardened Containers:stream: go

 https://cve.radiocsirt.org/vuln/bit-golang-2025-47907 BIT-golang-2025-47907 — Incorrect results returned from Rows.Scan in database/sql 2026-10-03T12:44:34.524239+00:00

Affected: Bitnami: golang

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0751 certfr-2025-avi-0751 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T12:44:34.524261+00:00 certfr-2025-avi-0751 https://cve.radiocsirt.org/vuln/cleanstart-2026-am62510 Withdrawn: CLEANSTART-2026-AM62510 — gRPC-Go is the Go language implementation of gRPC 2026-10-03T12:44:34.524279+00:00

Withdrawn by the publisher.

Affected: CleanStart: consul-k8s-fips

Multiple security vulnerabilities affect the consul-k8s-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-259962 EUVD-2026-259962 2026-10-03T12:44:34.524299+00:00 EUVD-2026-259962 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47907 fkie_cve-2025-47907 2026-10-03T12:44:34.524312+00:00

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

 https://cve.radiocsirt.org/vuln/ghsa-j5pm-7495-qmr3 GHSA-j5pm-7495-qmr3 2026-10-03T12:44:34.524335+00:00

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-47907 msrc_CVE-2025-47907 — Incorrect results returned from Rows.Scan in database/sql 2026-10-03T12:44:34.524352+00:00 msrc_CVE-2025-47907 https://cve.radiocsirt.org/vuln/oesa-2025-2180 OESA-2025-2180 — golang security update 2026-10-03T12:44:34.524369+00:00

Affected: openEuler:22.03-LTS-SP4: golang

. Security Fix(es):

A vulnerability was found in Google Go up to 1.23.11/1.24.5 (Programming Language Software). It has been declared as problematic.The manipulation of the argument PATH with an unknown input leads to a unknown weakness.As an impact it is known to affect integrity.Upgrading to version 1.23.12 or 1.24.6 eliminates this vulnerability.(CVE-2025-47906)

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.(CVE-2025-47907)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15420-1 openSUSE-SU-2025:15420-1 — go1.25-1.25rc3-1.1 on GA media 2026-10-03T12:44:34.524393+00:00

go1.25-1.25rc3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:17730 RHSA-2025:17730 — Red Hat Security Advisory: Red Hat OpenShift GitOps v1.16.4 security update 2026-10-03T12:44:34.524410+00:00

crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509 database/sql: Postgres Scan Race Condition github.com/argoproj/argo-cd/v2: github.com/argoproj/argo-cd/v3: Argo CD race condition leading to crash argocd: argocd-server: gitops: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload github.com/argoproj/argo-cd: Argo CD unauthenticated Denial of Service github.com/argoproj/argo-cd: Argo CD unauthenticated Remote Denial of Service

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-47907 UBUNTU-CVE-2025-47907 2026-10-03T12:44:34.524435+00:00

Affected: Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:20.04:LTS: golang-1.13, Ubuntu:20.04:LTS: golang-1.14, Ubuntu:Pro:20.04:LTS: golang-1.16, Ubuntu:20.04:LTS: golang-1.18, Ubuntu:20.04:LTS: golang-1.20 and 17 more

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

 https://cve.radiocsirt.org/vuln/vde-2026-088 VDE-2026-088 — METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4 2026-10-03T12:44:34.524486+00:00

The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.

The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25

All other vulnerabilities are to be fixed in the upcoming releases.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1740 WID-SEC-W-2025-1740 — Golang Go: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-03T12:44:34.524535+00:00

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Dateien zu manipulieren.