https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:54:30.892963+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0500 certfr-2026-avi-0500 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Elles permettent à un attaquant de provoquer un prob… 2026-10-02T14:54:30.901636+00:00 certfr-2026-avi-0500 https://cve.radiocsirt.org/vuln/cleanstart-2026-ag43501 Withdrawn: CLEANSTART-2026-AG43501 — Security fixes in sqlpad 7.5.7-r2 2026-10-02T14:54:30.901680+00:00

Withdrawn by the publisher.

Affected: CleanStart: sqlpad

Package sqlpad version 7.5.7-r2 fixes 26 vulnerabilities: ghsa-2v35-w6hq-6mfw, ghsa-f6ww-3ggp-fr8h, ghsa-wh4c-j3r5-mjhp, ghsa-x6wf-f3px-wcqx, ghsa-j759-j44w-7fr8...

 https://cve.radiocsirt.org/vuln/euvd-2026-308290 EUVD-2026-308290 2026-10-02T14:54:30.901714+00:00 EUVD-2026-308290 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3449 fkie_cve-2026-3449 2026-10-02T14:54:30.901727+00:00

Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains in a permanently pending state after the signal is aborted, causing any await or .then() usage to hang indefinitely. This can cause a control-flow leak that can lead to stalled requests, blocked workers, or degraded application availability.

 https://cve.radiocsirt.org/vuln/ghsa-vpq2-c234-7xj6 GHSA-vpq2-c234-7xj6 — @tootallnate/once vulnerable to Incorrect Control Flow Scoping 2026-10-02T14:54:30.901750+00:00

Affected: npm: @tootallnate/once

Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains in a permanently pending state after the signal is aborted, causing any await or .then() usage to hang indefinitely. This can cause a control-flow leak that can lead to stalled requests, blocked workers, or degraded application availability.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10290-1 openSUSE-SU-2026:10290-1 — heroic-games-launcher-2.20.1-2.1 on GA media 2026-10-02T14:54:30.901772+00:00

heroic-games-launcher-2.20.1-2.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2118 WID-SEC-W-2026-2118 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-02T14:54:30.901789+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.