https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:06:41.885319+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00268 bdu:2026-00268 2026-10-02T13:06:42.177780+00:00 bdu:2026-00268 https://cve.radiocsirt.org/vuln/bell-cve-2025-61727 BELL-CVE-2025-61727 2026-10-02T13:06:42.177827+00:00

Affected: Alpaquita:23: go, Alpaquita:25: go, Alpaquita:stream: docker, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:25: go, BellSoft Hardened Containers:stream: go

 https://cve.radiocsirt.org/vuln/bit-golang-2025-61727 BIT-golang-2025-61727 — Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 2026-10-02T13:06:42.177865+00:00

Affected: Bitnami: golang

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1078 certfr-2025-avi-1078 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-02T13:06:42.177891+00:00 certfr-2025-avi-1078 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad15516 Withdrawn: CLEANSTART-2026-AD15516 — Security fixes in prometheus-redis-exporter-fips 1.77.0-r0 2026-10-02T13:06:42.177907+00:00

Withdrawn by the publisher.

Affected: CleanStart: prometheus-redis-exporter-fips

Package prometheus-redis-exporter-fips version 1.77.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729

 https://cve.radiocsirt.org/vuln/euvd-2026-262521 EUVD-2026-262521 2026-10-02T13:06:42.177928+00:00 EUVD-2026-262521 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61727 fkie_cve-2025-61727 2026-10-02T13:06:42.177939+00:00

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.

 https://cve.radiocsirt.org/vuln/ghsa-5mh9-3jwc-rp59 GHSA-5mh9-3jwc-rp59 2026-10-02T13:06:42.177960+00:00

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-61727 msrc_CVE-2025-61727 — Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 2026-10-02T13:06:42.177974+00:00 msrc_CVE-2025-61727 https://cve.radiocsirt.org/vuln/oesa-2025-2863 OESA-2025-2863 — golang security update 2026-10-02T13:06:42.177989+00:00

Affected: openEuler:20.03-LTS-SP4: golang

. Security Fix(es):

crypto/x509: Exclude subdomain constraints do not restrict wildcard SANs Exclude subdomain constraints in certificate chains do not restrict the use of wildcard SANs in leaf certificates. For example, excluding the constraint on the subdomain test.example.com does not prevent the leaf certificate from claiming SAN*. example.com.(CVE-2025-61727)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15795-1 openSUSE-SU-2025:15795-1 — go1.25-1.25.5-1.1 on GA media 2026-10-02T13:06:42.178010+00:00

go1.25-1.25.5-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:0990 RHSA-2026:0990 — Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 2026-10-02T13:06:42.178025+00:00

golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion urllib3: urllib3 Streaming API improperly handles highly compressed data urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

 https://cve.radiocsirt.org/vuln/suse-su-2025:21192-1 SUSE-SU-2025:21192-1 — Security update for go1.25 2026-10-02T13:06:42.178046+00:00

Security update for go1.25

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-61727 UBUNTU-CVE-2025-61727 2026-10-02T13:06:42.178065+00:00

Affected: Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:25.10: golang-1.25, Ubuntu:26.04:LTS: golang-1.24, Ubuntu:26.04:LTS: golang-1.25

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2724 WID-SEC-W-2025-2724 — Golang Go: Mehrere Schwachstellen 2026-10-02T13:06:42.178091+00:00

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.