https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:04:05.189546+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09413 bdu:2026-09413 2026-10-02T13:04:05.349058+00:00 bdu:2026-09413 https://cve.radiocsirt.org/vuln/cleanstart-2026-ah11699 Withdrawn: CLEANSTART-2026-AH11699 — Security fixes in ollama 0.20.3-r1 2026-10-02T13:04:05.349099+00:00

Withdrawn by the publisher.

Affected: CleanStart: ollama

Package ollama version 0.20.3-r1 fixes 13 vulnerabilities: CVE-2026-33811, CVE-2026-33812, CVE-2026-33813, CVE-2026-33814, CVE-2026-39817...

 https://cve.radiocsirt.org/vuln/euvd-2026-330392 EUVD-2026-330392 2026-10-02T13:04:05.349149+00:00 EUVD-2026-330392 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33813 fkie_cve-2026-33813 2026-10-02T13:04:05.349171+00:00

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10682-1 openSUSE-SU-2026:10682-1 — rclone-1.74.0-1.1 on GA media 2026-10-02T13:04:05.349194+00:00

rclone-1.74.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:17789 RHSA-2026:17789 — Red Hat Security Advisory: Red Hat build of Cryostat 4.2.0: new RHEL 9 container image security update 2026-10-02T13:04:05.349213+00:00

io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression undici: undici: Denial of Service via crafted WebSocket frame with large length undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter lodash: lodash: Arbitrary code execution via untrusted input in template imports path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests follow-redi…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33813 UBUNTU-CVE-2026-33813 2026-10-02T13:04:05.349262+00:00

Affected: Ubuntu:18.04:LTS: golang-golang-x-image, Ubuntu:20.04:LTS: golang-golang-x-image, Ubuntu:22.04:LTS: golang-golang-x-image, Ubuntu:24.04:LTS: golang-golang-x-image, Ubuntu:25.10: golang-golang-x-image, Ubuntu:26.04:LTS: golang-golang-x-image

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1328 WID-SEC-W-2026-1328 — Red Hat Hardened Images RPMs: Mehrere Schwachstellen 2026-10-02T13:04:05.349289+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Hardened Images RPMs ausnutzen, um einen Denial of Service Angriff durchzuführen oder Daten zu manipulieren.