https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:12:33.288925+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-ch28428 Withdrawn: CLEANSTART-2026-CH28428 — Security fixes in langfuse 3.224.1-r1 2026-10-04T04:12:33.315146+00:00

Withdrawn by the publisher.

Affected: CleanStart: langfuse

Package langfuse version 3.224.1-r1 fixes 5 vulnerabilities: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591, ghsa-f88m-g3jw-g9cj

 https://cve.radiocsirt.org/vuln/euvd-2026-339010 EUVD-2026-339010 2026-10-04T04:12:33.315233+00:00 EUVD-2026-339010 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35590 fkie_cve-2026-35590 2026-10-04T04:12:33.315253+00:00

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in version 8.18.2.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35590 UBUNTU-CVE-2026-35590 2026-10-04T04:12:33.315278+00:00

Affected: Ubuntu:Pro:16.04:LTS: vips, Ubuntu:Pro:18.04:LTS: vips, Ubuntu:Pro:20.04:LTS: vips, Ubuntu:Pro:22.04:LTS: vips, Ubuntu:Pro:24.04:LTS: vips, Ubuntu:Pro:26.04:LTS: vips

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in version 8.18.2.