https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:21:48.020295+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-4660 BELL-CVE-2026-4660 2026-10-03T05:21:48.149097+00:00

Affected: Alpaquita:stream: grype

 https://cve.radiocsirt.org/vuln/cleanstart-2026-aq65185 Withdrawn: CLEANSTART-2026-AQ65185 — Security fixes for CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-61727, CVE-2025-61729, CVE-2026-1229, CVE-2… 2026-10-03T05:21:48.149145+00:00

Withdrawn by the publisher.

Affected: CleanStart: terragrunt-fips

Multiple security vulnerabilities affect the terragrunt-fips package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-337219 EUVD-2026-337219 2026-10-03T05:21:48.149175+00:00 EUVD-2026-337219 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4660 fkie_cve-2026-4660 2026-10-03T05:21:48.149189+00:00

HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package.

 https://cve.radiocsirt.org/vuln/ghsa-92mm-2pjq-r785 GHSA-92mm-2pjq-r785 — HashiCorp's go-getter library may allow arbitrary file reads 2026-10-03T05:21:48.149214+00:00

Affected: Go: github.com/hashicorp/go-getter

HashiCorp's go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package.

 https://cve.radiocsirt.org/vuln/rhsa-2026:24478 RHSA-2026:24478 — Red Hat Security Advisory: RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release 2026-10-03T05:21:48.149235+00:00

go-getter: go-getter: Arbitrary file reads via maliciously crafted URL crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4660 UBUNTU-CVE-2026-4660 2026-10-03T05:21:48.149255+00:00

Affected: Ubuntu:18.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:20.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:22.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:24.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:25.10: golang-github-hashicorp-go-getter

HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2010 WID-SEC-W-2026-2010 — OpenTofu: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T05:21:48.149280+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenTofu ausnutzen, um Informationen offenzulegen.