https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:00:25.425264+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375174 EUVD-2026-375174 2026-10-03T04:00:25.500165+00:00 EUVD-2026-375174 https://cve.radiocsirt.org/vuln/fkie_cve-2026-97058 fkie_cve-2026-97058 2026-10-03T04:00:25.500212+00:00

sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.

 https://cve.radiocsirt.org/vuln/ghsa-hp3w-g68c-fv3c GHSA-hp3w-g68c-fv3c 2026-10-03T04:00:25.500249+00:00

sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-97058 msrc_CVE-2026-97058 — sprintf-js through 1.1.3 Denial of Service via Unbounded Precision 2026-10-03T04:00:25.500268+00:00 msrc_CVE-2026-97058 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-97058 UBUNTU-CVE-2026-97058 2026-10-03T04:00:25.500285+00:00

Affected: Ubuntu:16.04:LTS: node-sprintf-js, Ubuntu:18.04:LTS: node-sprintf-js, Ubuntu:20.04:LTS: node-sprintf-js, Ubuntu:22.04:LTS: node-sprintf-js, Ubuntu:24.04:LTS: node-sprintf-js, Ubuntu:26.04:LTS: node-sprintf-js

sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.