https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:18:57.525347+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0933 certfr-2026-avi-0933 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T06:18:57.917911+00:00 certfr-2026-avi-0933 https://cve.radiocsirt.org/vuln/euvd-2026-324481 EUVD-2026-324481 2026-10-03T06:18:57.917988+00:00 EUVD-2026-324481 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33245 fkie_cve-2026-33245 2026-10-03T06:18:57.918005+00:00

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not impact applications that are not using the unstable RSC APIs in React Router. This is patched in version 7.13.2.

 https://cve.radiocsirt.org/vuln/ghsa-8646-j5j9-6r62 GHSA-8646-j5j9-6r62 — React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets 2026-10-03T06:18:57.918040+00:00

Affected: npm: react-router

When using React Router v7's unstable RSC APIs, there exists a potential client-side XSS issue in the RSC redirect handling if redirects are coming from untrusted sources

> [!NOTE] > This only impacts your application if you are using the unstable RSC APIs in React Router.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11680-1 openSUSE-SU-2026:11680-1 — agama-web-ui-24+0.a836cced5-52.1 on GA media 2026-10-03T06:18:57.918069+00:00

agama-web-ui-24+0.a836cced5-52.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:34456 RHSA-2026:34456 — Red Hat Security Advisory: RHOAI 3.4.2 - Red Hat OpenShift AI 2026-10-03T06:18:57.918096+00:00

mlflow: mlflow: Arbitrary file read via bypassed source path validation python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() starlette: Starlette: Security restriction bypass via malformed HTTP Host header