https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:22:38.900346+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05687 bdu:2026-05687 2026-10-04T15:22:39.998161+00:00 bdu:2026-05687 https://cve.radiocsirt.org/vuln/bell-cve-2025-47911 Withdrawn: BELL-CVE-2025-47911 — CVE-2025-47911 does not affect BellSoft software 2026-10-04T15:22:39.998218+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2026-avi-0218 certfr-2026-avi-0218 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-04T15:22:39.998250+00:00 certfr-2026-avi-0218 https://cve.radiocsirt.org/vuln/cleanstart-2026-ab43319 Withdrawn: CLEANSTART-2026-AB43319 — Security fixes for CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-… 2026-10-04T15:22:39.998268+00:00

Withdrawn by the publisher.

Affected: CleanStart: stakater-reloader

Multiple security vulnerabilities affect the stakater-reloader package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-268186 EUVD-2026-268186 2026-10-04T15:22:39.998301+00:00 EUVD-2026-268186 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47911 fkie_cve-2025-47911 2026-10-04T15:22:39.998313+00:00

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

 https://cve.radiocsirt.org/vuln/ghsa-w4gw-w5jq-g9jh GHSA-w4gw-w5jq-g9jh — golang.org/x/net/html has a Quadratic Parsing Complexity issue 2026-10-04T15:22:39.998335+00:00

Affected: Go: golang.org/x/net/html

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to Denial of Service (DoS) if an attacker provides specially crafted HTML content.

 https://cve.radiocsirt.org/vuln/opensuse-ru-2026:20010-1 openSUSE-RU-2026:20010-1 — Recommended update for trivy 2026-10-04T15:22:39.998355+00:00

Recommended update for trivy

 https://cve.radiocsirt.org/vuln/rhsa-2026:34342 RHSA-2026:34342 — Red Hat Security Advisory: Cluster Observability Operator 1.5.0 2026-10-04T15:22:39.998375+00:00

nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function nodejs-trim-newlines: ReDoS in .end() method braces: fails to limit the number of characters it can handle golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html launch-editor: vite: launch-editor: Arbitrary command execution via insufficient file argument sanitization golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html golang.org/x/net/html: Infinite parsing loop in golang.org/x/net undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression undici: undici: Denial of Service via crafted WebSocket frame with large length undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter lodash: lodash: Arbitrary code execution via untrusted input in template imports path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies fast-uri: fast-uri: URI authority bypass due to improper delimiter handlin…

 https://cve.radiocsirt.org/vuln/suse-su-2025:21043-1 SUSE-SU-2025:21043-1 — Security update for helm 2026-10-04T15:22:39.998454+00:00

Security update for helm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-47911 UBUNTU-CVE-2025-47911 2026-10-04T15:22:39.998471+00:00

Affected: Ubuntu:Pro:16.04:LTS: golang-golang-x-net-dev, Ubuntu:Pro:16.04:LTS: juju-core, Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: golang-golang-x-net-dev, Ubuntu:Pro:20.04:LTS: golang-golang-x-net-dev, Ubuntu:Pro:22.04:LTS: golang-golang-x-net, Ubuntu:Pro:24.04:LTS: golang-golang-x-net, Ubuntu:25.10: golang-golang-x-net, Ubuntu:26.04:LTS: golang-golang-x-net

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1618 WID-SEC-W-2026-1618 — Splunk Splunk Enterprise: Mehrere Schwachstellen 2026-10-04T15:22:39.998505+00:00

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.