https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:09:30.527958+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07237 bdu:2026-07237 2026-10-03T07:09:30.819751+00:00 bdu:2026-07237 https://cve.radiocsirt.org/vuln/brew-krane-cve-2026-33176 BREW-krane-CVE-2026-33176 — Rails Active Support has a possible DoS vulnerability in its number helpers 2026-10-03T07:09:30.819821+00:00

Affected: Homebrew: krane

### Impact Active Support number helpers accept strings containing scientific notation (e.g. `1e10000`), which when converted to a string could be expanded into extremely large decimal representations. This can cause excessive memory allocation and CPU consumption when the expanded number is formatted, possibly resulting in a DoS vulnerability.

### Releases The fixed releases are available at the normal locations.

### Credit This issue was responsibly reported by Hackerone researcher [manun](https://hackerone.com/manun).

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0349 certfr-2026-avi-0349 — De multiples vulnérabilités ont été découvertes dans les produits Ruby on Rails. Certaines d'entre elles permettent à u… 2026-10-03T07:09:30.819887+00:00 certfr-2026-avi-0349 https://cve.radiocsirt.org/vuln/euvd-2026-277265 EUVD-2026-277265 2026-10-03T07:09:30.819921+00:00 EUVD-2026-277265 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33176 fkie_cve-2026-33176 2026-10-03T07:09:30.819942+00:00

Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Support number helpers accept strings containing scientific notation (e.g. `1e10000`), which `BigDecimal` expands into extremely large decimal representations. This can cause excessive memory allocation and CPU consumption when the expanded number is formatted, possibly resulting in a DoS vulnerability. Versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 contain a patch.

 https://cve.radiocsirt.org/vuln/ghsa-2j26-frm8-cmj9 GHSA-2j26-frm8-cmj9 — Rails Active Support has a possible DoS vulnerability in its number helpers 2026-10-03T07:09:30.819981+00:00

Affected: RubyGems: activesupport

### Impact Active Support number helpers accept strings containing scientific notation (e.g. `1e10000`), which when converted to a string could be expanded into extremely large decimal representations. This can cause excessive memory allocation and CPU consumption when the expanded number is formatted, possibly resulting in a DoS vulnerability.

### Releases The fixed releases are available at the normal locations.

### Credit This issue was responsibly reported by Hackerone researcher [manun](https://hackerone.com/manun).

 https://cve.radiocsirt.org/vuln/rhsa-2026:14835 RHSA-2026:14835 — Red Hat Security Advisory: Satellite 6.18.5 Async Update 2026-10-03T07:09:30.820029+00:00

Django: Django: Denial of Service via crafted request with duplicate headers python-markdown: denial of service via malformed HTML-like sequences Django: Django: SQL Injection via RasterField band index parameter Django: Django: Denial of Service via crafted HTML inputs Django: Django: SQL Injection via crafted column aliases Django: Django: SQL injection via crafted column aliases in QuerySet.order_by() pyOpenSSL: DTLS cookie callback buffer overflow Rails: Active Support: Active Support: Denial of Service via large scientific notation strings

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33176 UBUNTU-CVE-2026-33176 2026-10-03T07:09:30.820094+00:00

Affected: Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails, Ubuntu:24.04:LTS: rails, Ubuntu:25.10: rails, Ubuntu:26.04:LTS: rails

Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Support number helpers accept strings containing scientific notation (e.g. `1e10000`), which `BigDecimal` expands into extremely large decimal representations. This can cause excessive memory allocation and CPU consumption when the expanded number is formatted, possibly resulting in a DoS vulnerability. Versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 contain a patch.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0833 WID-SEC-W-2026-0833 — Ruby on Rails: Mehrere Schwachstellen 2026-10-03T07:09:30.820163+00:00

Ein Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.