https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:51:23.234162+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15315 bdu:2026-15315 2026-10-04T04:51:23.605706+00:00 bdu:2026-15315 https://cve.radiocsirt.org/vuln/brew-abi3audit-cve-2026-4539 BREW-abi3audit-CVE-2026-4539 — Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching 2026-10-04T04:51:23.605747+00:00

Affected: Homebrew: abi3audit

A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0550 certfr-2026-avi-0550 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T04:51:23.605784+00:00 certfr-2026-avi-0550 https://cve.radiocsirt.org/vuln/cleanstart-2026-az09261 Withdrawn: CLEANSTART-2026-AZ09261 — Security fixes for CVE-2023-46136, CVE-2024-12797, CVE-2024-34069, CVE-2024-49766, CVE-2024-49767, CVE-2025-62727, CVE-… 2026-10-04T04:51:23.605801+00:00

Withdrawn by the publisher.

Affected: CleanStart: airflow-3

Multiple security vulnerabilities affect the airflow-3 package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-276951 EUVD-2026-276951 2026-10-04T04:51:23.605829+00:00 EUVD-2026-276951 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4539 fkie_cve-2026-4539 2026-10-04T04:51:23.605841+00:00

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/ghsa-5239-wwwm-4pmq GHSA-5239-wwwm-4pmq — Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching 2026-10-04T04:51:23.605863+00:00

Affected: PyPI: Pygments

A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/oesa-2026-1873 OESA-2026-1873 — python-pygments security update 2026-10-04T04:51:23.605883+00:00

Affected: openEuler:24.03-LTS-SP1: python-pygments, openEuler:24.03-LTS-SP2: python-pygments, openEuler:24.03-LTS-SP3: python-pygments, openEuler:20.03-LTS-SP4: python-pygments, openEuler:22.03-LTS-SP4: python-pygments, openEuler:24.03-LTS: python-pygments

\ Security Fix(es):

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.(CVE-2026-4539)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10476-1 openSUSE-SU-2026:10476-1 — python311-Pygments-2.20.0-2.1 on GA media 2026-10-04T04:51:23.605914+00:00

python311-Pygments-2.20.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-2987 PYSEC-2026-2987 — Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching 2026-10-04T04:51:23.605931+00:00

Affected: PyPI: pygments

A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/suse-su-2026:22058-1 SUSE-SU-2026:22058-1 — Security update for python-Pygments 2026-10-04T04:51:23.605950+00:00

Security update for python-Pygments

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4539 UBUNTU-CVE-2026-4539 2026-10-04T04:51:23.605964+00:00

Affected: Ubuntu:Pro:14.04:LTS: pygments, Ubuntu:16.04:LTS: pygments, Ubuntu:18.04:LTS: pygments, Ubuntu:20.04:LTS: pygments, Ubuntu:22.04:LTS: pygments, Ubuntu:24.04:LTS: pygments, Ubuntu:25.10: pygments, Ubuntu:26.04:LTS: pygments

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3046 WID-SEC-W-2026-3046 — IBM Concert: Mehrere Schwachstellen 2026-10-04T04:51:23.605991+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Concert ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.