https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:20:50.426783+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0888 certfr-2026-avi-0888 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq… 2026-10-03T05:20:50.439800+00:00 certfr-2026-avi-0888 https://cve.radiocsirt.org/vuln/cleanstart-2026-ap92343 Withdrawn: CLEANSTART-2026-AP92343 — Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32287, CVE-… 2026-10-03T05:20:50.439837+00:00

Withdrawn by the publisher.

Affected: CleanStart: tempo-fips

Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-278108 EUVD-2026-278108 2026-10-03T05:20:50.439869+00:00 EUVD-2026-278108 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32287 fkie_cve-2026-32287 2026-10-03T05:20:50.439882+00:00

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".

 https://cve.radiocsirt.org/vuln/ghsa-65xw-vw82-r86x GHSA-65xw-vw82-r86x — XPath: Boolean expression infinite loop leads to denial of service via CPU exhaustion 2026-10-03T05:20:50.439904+00:00

Affected: Go: github.com/antchfx/xpath

Boolean expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-32287 msrc_CVE-2026-32287 — Infinite loop in github.com/antchfx/xpath 2026-10-03T05:20:50.439924+00:00 msrc_CVE-2026-32287 https://cve.radiocsirt.org/vuln/rhsa-2026:9388 RHSA-2026:9388 — Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.2 release 2026-10-03T05:20:50.439939+00:00

github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32287 UBUNTU-CVE-2026-32287 2026-10-03T05:20:50.439956+00:00

Affected: Ubuntu:20.04:LTS: golang-github-antchfx-xpath, Ubuntu:22.04:LTS: golang-github-antchfx-xpath, Ubuntu:24.04:LTS: golang-github-antchfx-xpath, Ubuntu:25.10: golang-github-antchfx-xpath, Ubuntu:26.04:LTS: golang-github-antchfx-xpath

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".