https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:40:32.976697+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-350853 EUVD-2026-350853 2026-10-04T03:40:33.044504+00:00 EUVD-2026-350853 https://cve.radiocsirt.org/vuln/fkie_cve-2026-65819 fkie_cve-2026-65819 2026-10-04T03:40:33.044543+00:00

gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerParser or DecodeFromBytes to trigger an unrecovered panic and remotely deny service. A patch commit is available at 210f25f.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-65819 msrc_CVE-2026-65819 — gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote Do… 2026-10-04T03:40:33.044577+00:00 msrc_CVE-2026-65819 https://cve.radiocsirt.org/vuln/rhsa-2026:70593 RHSA-2026:70593 — Red Hat Security Advisory: Network Observability 1.12.3 for OpenShift 2026-10-04T03:40:33.044598+00:00

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages github.com/gopacket/gopacket: gopacket: Remote Denial of Service via crafted packet processing nanoid: nanoid: Denial of Service via infinite loop in random ID generation fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding fast-uri: fast-uri: Host confusion via skipped IDN canonicalization fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-65819 UBUNTU-CVE-2026-65819 2026-10-04T03:40:33.044645+00:00

Affected: Ubuntu:24.04:LTS: golang-github-gopacket-gopacket, Ubuntu:26.04:LTS: golang-github-gopacket-gopacket

gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerParser or DecodeFromBytes to trigger an unrecovered panic and remotely deny service. A patch commit is available at 210f25f.