https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:40:45.482228+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0901 certfr-2026-avi-0901 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T20:40:45.487704+00:00 certfr-2026-avi-0901 https://cve.radiocsirt.org/vuln/euvd-2026-252817 EUVD-2026-252817 2026-10-03T20:40:45.487743+00:00 EUVD-2026-252817 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59436 fkie_cve-2025-59436 2026-10-03T20:40:45.487758+00:00

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415.

 https://cve.radiocsirt.org/vuln/ghsa-qf5v-q897-m77r GHSA-qf5v-q897-m77r 2026-10-03T20:40:45.487785+00:00

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415.

 https://cve.radiocsirt.org/vuln/rhsa-2026:62115 RHSA-2026:62115 — Red Hat Security Advisory: Red Hat Ceph Storage 2026-10-03T20:40:45.487800+00:00

taffy: taffydb: Internal Property Tampering containerd: OCI image importer memory exhaustion request: bypass of SSRF mitigations when following a cross-protocol redirect npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation urllib3: urllib3 does not control redirects in browsers and Node.js ip: Node ip SSRF urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-59436 UBUNTU-CVE-2025-59436 2026-10-03T20:40:45.487826+00:00

Affected: Ubuntu:Pro:18.04:LTS: node-ip, Ubuntu:Pro:20.04:LTS: node-ip, Ubuntu:Pro:22.04:LTS: node-ip, Ubuntu:24.04:LTS: node-ip, Ubuntu:25.10: node-ip, Ubuntu:26.04:LTS: node-ip

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415.