https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:17:05.240635+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-11028 bdu:2026-11028 2026-10-03T16:17:05.432615+00:00 bdu:2026-11028 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad69953 Withdrawn: CLEANSTART-2026-AD69953 — Security fixes in argo-cd-fips 3.1.14-r0 2026-10-03T16:17:05.432654+00:00

Withdrawn by the publisher.

Affected: CleanStart: argo-cd-fips

Package argo-cd-fips version 3.1.14-r0 fixes 14 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...

 https://cve.radiocsirt.org/vuln/euvd-2026-278777 EUVD-2026-278777 2026-10-03T16:17:05.432687+00:00 EUVD-2026-278777 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34165 fkie_cve-2026-34165 2026-10-03T16:17:05.432701+00:00

go-git is an extensible git implementation library written in pure Go. From version 5.0.0 to before version 5.17.1, a vulnerability has been identified in which a maliciously crafted .idx file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a denial-of-service (DoS) condition. Exploitation requires write access to the local repository's .git directory, it order to create or alter existing .idx files. This issue has been patched in version 5.17.1.

 https://cve.radiocsirt.org/vuln/ghsa-jhf3-xxhw-2wpp GHSA-jhf3-xxhw-2wpp — go-git: Maliciously crafted idx file can cause asymmetric memory consumption 2026-10-03T16:17:05.432725+00:00

Affected: Go: github.com/go-git/go-git/v5

### Impact

A vulnerability has been identified in which a maliciously crafted `.idx` file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a Denial of Service (DoS) condition.

Exploitation requires write access to the local repository's `.git` directory, it order to create or alter existing `.idx` files.

### Patches

Users should upgrade to `v5.17.1`, or the latest `v6` [pseudo-version](https://go.dev/ref/mod#pseudo-versions), in order to mitigate this vulnerability.

### Credit

The go-git maintainers thank @kq5y for finding and reporting this issue privately to the `go-git` project.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10509-1 openSUSE-SU-2026:10509-1 — steampipe-2.4.1-1.1 on GA media 2026-10-03T16:17:05.432753+00:00

steampipe-2.4.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34165 UBUNTU-CVE-2026-34165 2026-10-03T16:17:05.432771+00:00

Affected: Ubuntu:Pro:22.04:LTS: golang-github-go-git-go-git, Ubuntu:Pro:24.04:LTS: golang-github-go-git-go-git, Ubuntu:25.10: golang-github-go-git-go-git, Ubuntu:Pro:26.04:LTS: golang-github-go-git-go-git

go-git is an extensible git implementation library written in pure Go. From version 5.0.0 to before version 5.17.1, a vulnerability has been identified in which a maliciously crafted .idx file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a denial-of-service (DoS) condition. Exploitation requires write access to the local repository's .git directory, it order to create or alter existing .idx files. This issue has been patched in version 5.17.1.