https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:06:46.287045+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0424 certfr-2026-avi-0424 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T13:06:47.219699+00:00 certfr-2026-avi-0424 https://cve.radiocsirt.org/vuln/euvd-2026-366097 EUVD-2026-366097 2026-10-03T13:06:47.219815+00:00 EUVD-2026-366097 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22029 fkie_cve-2026-22029 2026-10-03T13:06:47.219847+00:00

React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect. There is no impact if Declarative Mode (<BrowserRouter>) is being used. This issue has been patched in @remix-run/router version 1.23.2 and react-router version 7.12.0.

 https://cve.radiocsirt.org/vuln/ghsa-2w69-qvjg-hvjx GHSA-2w69-qvjg-hvjx — React Router vulnerable to XSS via Open Redirects 2026-10-03T13:06:47.219899+00:00

Affected: npm: react-router, npm: @remix-run/router

React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in [Framework Mode](https://reactrouter.com/start/modes#framework), [Data Mode](https://reactrouter.com/start/modes#data), or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if developers are creating redirect paths from untrusted content or via an open redirect.

> [!NOTE] > This does not impact applications that use [Declarative Mode](https://reactrouter.com/start/modes#declarative) (`<BrowserRouter>`).

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10069-1 openSUSE-SU-2026:10069-1 — heroic-games-launcher-2.18.1-2.1 on GA media 2026-10-03T13:06:47.219948+00:00

heroic-games-launcher-2.18.1-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:13542 RHSA-2026:13542 — Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.2 security update 2026-10-03T13:06:47.219977+00:00

lodash: prototype pollution in _.unset and _.omit functions golang: archive/tar: Unbounded allocation when parsing GNU sparse map golang: net/url: Memory exhaustion in query parameter parsing in net/url crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption rhacm: Open Cluster Management (OCM): Cross-cluster privilege escalation via improper Kubernetes client certificate renewal validation @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution axios: Axios: Remote Code Execution via Prototype Pollution escalation

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0553 WID-SEC-W-2026-0553 — HCL BigFix: Mehrere Schwachstellen 2026-10-03T13:06:47.220029+00:00

Ein Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, und um Dateien zu manipulieren.