https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:17:46.500846+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-cn27900 Withdrawn: CLEANSTART-2026-CN27900 — Security fixes for CVE-2025-63811, CVE-2026-1229, CVE-2026-24051, CVE-2026-25680, CVE-2026-25681, CVE-2026-26958, CVE-2… 2026-10-04T14:17:46.584275+00:00

Withdrawn by the publisher.

Affected: CleanStart: vault

Multiple security vulnerabilities affect the vault package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-260724 EUVD-2026-260724 2026-10-04T14:17:46.584336+00:00 EUVD-2026-260724 https://cve.radiocsirt.org/vuln/fkie_cve-2025-63811 fkie_cve-2025-63811 2026-10-04T14:17:46.584352+00:00

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.

 https://cve.radiocsirt.org/vuln/ghsa-9mj6-hxhv-w67j GHSA-9mj6-hxhv-w67j — jose2go is vulnerable to a JWT bomb attack through its decode function 2026-10-04T14:17:46.584376+00:00

Affected: Go: github.com/dvsekhvalnov/jose2go

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-63811 UBUNTU-CVE-2025-63811 2026-10-04T14:17:46.584407+00:00

Affected: Ubuntu:16.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:18.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:20.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:22.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:24.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:25.10: golang-github-dvsekhvalnov-jose2go, Ubuntu:26.04:LTS: golang-github-dvsekhvalnov-jose2go

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.