https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:08:39.514874+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T19:08:39.537683+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-fl07611 Withdrawn: CLEANSTART-2026-FL07611 — Security fixes in npm 11.14.0-r2 2026-10-02T19:08:39.537728+00:00

Withdrawn by the publisher.

Affected: CleanStart: npm

Package npm version 11.14.0-r2 fixes 1 vulnerabilities: CVE-2026-9496

 https://cve.radiocsirt.org/vuln/euvd-2026-333707 EUVD-2026-333707 2026-10-02T19:08:39.537761+00:00 EUVD-2026-333707 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9496 fkie_cve-2026-9496 2026-10-02T19:08:39.537775+00:00

Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s regex replacement and string-manipulation logic, causing excessive CPU consumption and potentially stalling or crashing the process.

 https://cve.radiocsirt.org/vuln/ghsa-w4pp-8pjf-rmxw GHSA-w4pp-8pjf-rmxw — pacote is vulnerable to Denial of Service (DoS) via the addGitSha function 2026-10-02T19:08:39.537799+00:00

Affected: npm: pacote

Versions of the package pacote from 11.2.7 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s regex replacement and string-manipulation logic, causing excessive CPU consumption and potentially stalling or crashing the process.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11121-1 openSUSE-SU-2026:11121-1 — corepack24-24.17.0-1.1 on GA media 2026-10-02T19:08:39.537821+00:00

corepack24-24.17.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:72116 RHSA-2026:72116 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-02T19:08:39.537850+00:00

pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function

 https://cve.radiocsirt.org/vuln/suse-su-2026:22368-1 SUSE-SU-2026:22368-1 — Security update for nodejs22 2026-10-02T19:08:39.537865+00:00

Security update for nodejs22

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9496 UBUNTU-CVE-2026-9496 2026-10-02T19:08:39.537891+00:00

Affected: Ubuntu:14.04:LTS: npm, Ubuntu:Pro:16.04:LTS: npm, Ubuntu:Pro:18.04:LTS: npm, Ubuntu:20.04:LTS: npm, Ubuntu:22.04:LTS: npm, Ubuntu:24.04:LTS: npm, Ubuntu:25.10: npm, Ubuntu:26.04:LTS: npm

Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s regex replacement and string-manipulation logic, causing excessive CPU consumption and potentially stalling or crashing the process.