https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:36:27.469906+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-gq95457 CLEANSTART-2026-GQ95457 — Security fix for ghsa-vvgc-356p-c3xw applied in: calico-fips 3.27.5-r0, cfssl 1.5.0-r1, clickhouse-operator 0.25.5-r0,… 2026-10-06T14:36:27.480694+00:00

Affected: CleanStart: calico-fips, CleanStart: cfssl, CleanStart: clickhouse-operator, CleanStart: cortex-fips, CleanStart: cosign, CleanStart: distribution, CleanStart: dynamic-localpv-provisioner, CleanStart: external-dns-fips, CleanStart: falcoctl, CleanStart: go-fips-1.24 and 30 more

ghsa-vvgc-356p-c3xw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/ghsa-6v2p-p543-phr9 GHSA-6v2p-p543-phr9 — golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability 2026-10-06T14:36:27.480789+00:00

Affected: Go: golang.org/x/oauth2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.