https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:28:24.760173+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-envoy-2026-48042 BIT-envoy-2026-48042 — Envoy: Stack overflow in destructor of highly nested JSON 2026-10-02T14:28:24.786473+00:00

Affected: Bitnami: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object results in stack overflow when deeply O(100K) nested objects are present. This vulnerability is fixed in 1.35.11, 1.36.7, 1.37.3, and 1.38.1.

 https://cve.radiocsirt.org/vuln/euvd-2026-331015 EUVD-2026-331015 2026-10-02T14:28:24.786538+00:00 EUVD-2026-331015 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48042 fkie_cve-2026-48042 2026-10-02T14:28:24.786556+00:00

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object results in stack overflow when deeply O(100K) nested objects are present. This vulnerability is fixed in 1.35.11, 1.36.7, 1.37.3, and 1.38.1.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11141-1 openSUSE-SU-2026:11141-1 — istioctl-1.30.2-1.1 on GA media 2026-10-02T14:28:24.786579+00:00

istioctl-1.30.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:49705 RHSA-2026:49705 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.14 2026-10-02T14:28:24.786599+00:00

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries envoy: Envoy: Denial of Service via Connect protocol request envoy: Envoy: Null pointer deref in internal redirects envoy: Envoy: Denial of Service via deeply nested JSON objects Envoy: Envoy: Denial of Service via specially crafted zstd payload

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2048 WID-SEC-W-2026-2048 — Google Cloud Service Mesh und Envoy Proxy: Mehrere Schwachstellen 2026-10-02T14:28:24.786620+00:00

Ein Angreifer kann mehrere Schwachstellen in Google Cloud Service Mesh und Envoy Proxy ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder andere, nicht näher bezeichnete Angriffe durchzuführen.