https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:00:33.250579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-16415 bdu:2025-16415 2026-10-02T23:00:33.323344+00:00 bdu:2025-16415 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0896 certfr-2025-avi-0896 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T23:00:33.323382+00:00 certfr-2025-avi-0896 https://cve.radiocsirt.org/vuln/cleanstart-2026-il36032 Withdrawn: CLEANSTART-2026-IL36032 — Security fixes for CVE-2025-30218, CVE-2025-49005, CVE-2025-65945, ghsa-2mjp-6q6p-2qxm, ghsa-33vc-wfww-vjfv, ghsa-43fc-… 2026-10-02T23:00:33.323401+00:00

Withdrawn by the publisher.

Affected: CleanStart: jitsucom-jitsu

Multiple security vulnerabilities affect the jitsucom-jitsu package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-246689 EUVD-2026-246689 2026-10-02T23:00:33.323433+00:00 EUVD-2026-246689 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49005 fkie_cve-2025-49005 2026-10-02T23:00:33.323445+00:00

Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, a cache poisoning vulnerability was found. The issue allowed page requests for HTML content to return a React Server Component (RSC) payload instead under certain conditions. When deployed to Vercel, this would only impact the browser cache, and would not lead to the CDN being poisoned. When self-hosted and deployed externally, this could lead to cache poisoning if the CDN does not properly distinguish between RSC / HTML in the cache keys. This issue has been resolved in Next.js 15.3.3.

 https://cve.radiocsirt.org/vuln/ghsa-r2fc-ccr8-96c4 GHSA-r2fc-ccr8-96c4 — Next.js has a Cache poisoning vulnerability due to omission of the Vary header 2026-10-02T23:00:33.323470+00:00

Affected: npm: next

### Summary

A cache poisoning issue in **Next.js App Router >=15.3.0 and < 15.3.3** may have allowed RSC payloads to be cached and served in place of HTML, under specific conditions involving middleware and redirects. This issue has been fixed in **Next.js 15.3.3**.

Users on affected versions should **upgrade immediately** and **redeploy** to ensure proper caching behavior.

More details: [CVE-2025-49005](https://vercel.com/changelog/cve-2025-49005)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1456 WID-SEC-W-2025-1456 — Vercel Next.js: Mehrere Schwachstellen 2026-10-02T23:00:33.323494+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um falsche Informationen darzustellen oder einen Denial of Service Zustand zu verursachen.