https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:31:52.908495+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15319 bdu:2026-15319 2026-10-02T20:31:53.237898+00:00 bdu:2026-15319 https://cve.radiocsirt.org/vuln/cleanstart-2026-bv44413 CLEANSTART-2026-BV44413 — Security fix for CVE-2026-46604 applied in: mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, ollama 0.31.2-r2, ollama 0.32.11… 2026-10-02T20:31:53.237947+00:00

Affected: CleanStart: mailpit, CleanStart: mailpit-fips, CleanStart: ollama, CleanStart: ollama-fips

CVE-2026-46604 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-331005 EUVD-2026-331005 2026-10-02T20:31:53.237993+00:00 EUVD-2026-331005 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46604 fkie_cve-2026-46604 2026-10-02T20:31:53.238007+00:00

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11155-1 openSUSE-SU-2026:11155-1 — kbfs-6.6.3-2.1 on GA media 2026-10-02T20:31:53.238029+00:00

kbfs-6.6.3-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:66521 RHSA-2026:66521 — Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.1 2026-10-02T20:31:53.238049+00:00

github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction aws-smithy-json: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey golang.org/x/crypto/s…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-46604 UBUNTU-CVE-2026-46604 2026-10-02T20:31:53.238118+00:00

Affected: Ubuntu:18.04:LTS: golang-golang-x-image, Ubuntu:20.04:LTS: golang-golang-x-image, Ubuntu:22.04:LTS: golang-golang-x-image, Ubuntu:24.04:LTS: golang-golang-x-image, Ubuntu:25.10: golang-golang-x-image, Ubuntu:26.04:LTS: golang-golang-x-image

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.