https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:54:06.418015+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-1072 certfr-2025-avi-1072 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T23:54:06.474302+00:00 certfr-2025-avi-1072 https://cve.radiocsirt.org/vuln/cleanstart-2026-mc89115 CLEANSTART-2026-MC89115 — Security fix for CVE-2025-57350 applied in: sqlpad 7.5.7-r0, sqlpad 7.5.7-r1 2026-10-04T23:54:06.474359+00:00

Affected: CleanStart: sqlpad

CVE-2025-57350 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-253424 EUVD-2026-253424 2026-10-04T23:54:06.474406+00:00 EUVD-2026-253424 https://cve.radiocsirt.org/vuln/fkie_cve-2025-57350 fkie_cve-2025-57350 2026-10-04T23:54:06.474430+00:00

The csvtojson package, a tool for converting CSV data to JSON with customizable parsing capabilities, contains a prototype pollution vulnerability in versions prior to 2.0.10. This issue arises due to insufficient sanitization of nested header names during the parsing process in the parser_jsonarray component. When processing CSV input containing specially crafted header fields that reference prototype chains (e.g., using __proto__ syntax), the application may unintentionally modify properties of the base Object prototype. This vulnerability can lead to denial of service conditions or unexpected behavior in applications relying on unmodified prototype chains, particularly when untrusted CSV data is processed. The flaw does not require user interaction beyond providing a maliciously constructed CSV file.

 https://cve.radiocsirt.org/vuln/ghsa-vrw9-g62v-7fmf GHSA-vrw9-g62v-7fmf — CSVTOJSON has a prototype pollution vulnerability 2026-10-04T23:54:06.474469+00:00

Affected: npm: csvtojson

The csvtojson package, a tool for converting CSV data to JSON with customizable parsing capabilities, contains a prototype pollution vulnerability in versions prior to 2.0.10. This issue arises due to insufficient sanitization of nested header names during the parsing process in the parser_jsonarray component. When processing CSV input containing specially crafted header fields that reference prototype chains (e.g., using __proto__ syntax), the application may unintentionally modify properties of the base Object prototype. This vulnerability can lead to denial of service conditions or unexpected behavior in applications relying on unmodified prototype chains, particularly when untrusted CSV data is processed. The flaw does not require user interaction beyond providing a maliciously constructed CSV file.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2681 WID-SEC-W-2025-2681 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-04T23:54:06.474507+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsmaßnahmen zu umgehen und Cross-Site-Scripting- oder Open-Redirect-Angriffe durchzuführen, einen Denial-of-Service-Zustand herbeizuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.