https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:47:27.394712+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-12591 bdu:2025-12591 2026-10-03T23:47:27.429026+00:00 bdu:2025-12591 https://cve.radiocsirt.org/vuln/bell-cve-2025-57052 Withdrawn: BELL-CVE-2025-57052 — CVE-2025-57052 does not affect BellSoft software 2026-10-03T23:47:27.429066+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/euvd-2026-257575 EUVD-2026-257575 2026-10-03T23:47:27.429085+00:00 EUVD-2026-257575 https://cve.radiocsirt.org/vuln/fkie_cve-2025-57052 fkie_cve-2025-57052 2026-10-03T23:47:27.429096+00:00

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

 https://cve.radiocsirt.org/vuln/ghsa-98j5-4649-rfv2 GHSA-98j5-4649-rfv2 2026-10-03T23:47:27.429124+00:00

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-57052 msrc_CVE-2025-57052 — cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.… 2026-10-03T23:47:27.429139+00:00 msrc_CVE-2025-57052 https://cve.radiocsirt.org/vuln/oesa-2025-2374 OESA-2025-2374 — cjson security update 2026-10-03T23:47:27.429157+00:00

Affected: openEuler:22.03-LTS-SP3: cjson

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - %description devel The cjson-devel package contains libraries and header files for developing applications that use cJSON. %prep %autosetup -n cJSON- -p1 Security Fix(es):

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.(CVE-2025-57052)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15583-1 openSUSE-SU-2025:15583-1 — cJSON-devel-1.7.19-1.1 on GA media 2026-10-03T23:47:27.429184+00:00

cJSON-devel-1.7.19-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:17606 RHSA-2025:17606 — Red Hat Security Advisory: Satellite 6.17.5 Async Update 2026-10-03T23:47:27.429200+00:00

rexml: REXML: Denial of Service via inefficient regex parsing cJSON: out-of-bounds access in decode_array_index_from_pointer() in cJSON_Utils.c via crafted JSON pointer strings django: Django SQL injection in FilteredRelation column aliases

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-57052 UBUNTU-CVE-2025-57052 2026-10-03T23:47:27.429219+00:00

Affected: Ubuntu:Pro:20.04:LTS: cjson, Ubuntu:22.04:LTS: cjson, Ubuntu:Pro:24.04:LTS: cjson, Ubuntu:25.10: cjson

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2244 WID-SEC-W-2025-2244 — Red Hat Satellite (cJSON, django, rexml): Mehrere Schwachstellen 2026-10-03T23:47:27.429241+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Satellite und Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen und um beliebige SQL-Befehle einzuschleusen.