https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:55:22.977467+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0746 certfr-2025-avi-0746 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T23:55:22.987446+00:00 certfr-2025-avi-0746 https://cve.radiocsirt.org/vuln/euvd-2026-247785 EUVD-2026-247785 2026-10-02T23:55:22.987504+00:00 EUVD-2026-247785 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7338 fkie_cve-2025-7338 2026-10-02T23:55:22.987520+00:00

Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload request. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to version 2.0.2 to receive a patch. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/ghsa-fjgf-rc76-4x9p GHSA-fjgf-rc76-4x9p — Multer vulnerable to Denial of Service via unhandled exception from malformed request 2026-10-02T23:55:22.987553+00:00

Affected: npm: multer

### Impact

A vulnerability in Multer versions >= 1.4.4-lts.1, < 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed request. This request causes an unhandled exception, leading to a crash of the process.

### Patches

Users should upgrade to `2.0.2`

### Workarounds

None

 https://cve.radiocsirt.org/vuln/rhsa-2025:14090 RHSA-2025:14090 — Red Hat Security Advisory: Red Hat Developer Hub 1.7.0 release. 2026-10-02T23:55:22.987581+00:00

rhdh: Red Hat Developer Hub user permissions pbkdf2: pbkdf2 silently returns predictable key material multer: Multer Denial of Service golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware tar-fs: tar-fs has issue where extract can write outside the specified dir with a specific tarball multer: Multer vulnerable to Denial of Service via unhandled exception @node-saml/node-saml: Node-SAML Signature Verification Vulnerability

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1854 WID-SEC-W-2025-1854 — HCL BigFix Komponente: Mehrere Schwachstellen 2026-10-02T23:55:22.987610+00:00

Ein Angreifer kann mehrere Schwachstellen in HCL BigFix Komponente ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.