https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:44:09.272366+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05839 bdu:2026-05839 2026-10-02T18:44:09.336173+00:00 bdu:2026-05839 https://cve.radiocsirt.org/vuln/cleanstart-2026-ce10526 Withdrawn: CLEANSTART-2026-CE10526 — Security fixes for CVE-2025-64756, CVE-2025-69873, CVE-2026-1525, CVE-2026-1526, CVE-2026-1527, CVE-2026-1528, CVE-2026… 2026-10-02T18:44:09.336207+00:00

Withdrawn by the publisher.

Affected: CleanStart: renovate

Multiple security vulnerabilities affect the renovate package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-367735 EUVD-2026-367735 2026-10-02T18:44:09.336247+00:00 EUVD-2026-367735 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6951 fkie_cve-2026-6951 2026-10-02T18:44:09.336260+00:00

Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3112221) that blocks the -c option but not the equivalent --config form. If untrusted input can reach the options argument passed to simple-git, an attacker may still achieve remote code execution by enabling protocol.ext.allow=always and using an ext:: clone source.

 https://cve.radiocsirt.org/vuln/ghsa-hffm-xvc3-vprc GHSA-hffm-xvc3-vprc — simple-git is vulnerable to Remote Code Execution 2026-10-02T18:44:09.336282+00:00

Affected: npm: simple-git

Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3112221) that blocks the -c option but not the equivalent --config form. If untrusted input can reach the options argument passed to simple-git, an attacker may still achieve remote code execution by enabling protocol.ext.allow=always and using an ext:: clone source.