https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T06:53:41.983542+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-22868 CVE-2025-22868 — Unexpected memory consumption during token parsing in golang.org/x/oauth2 2026-10-15T06:53:41.991916+00:00

Affected: golang.org/x/oauth2/jws

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

 https://cve.radiocsirt.org/vuln/ghsa-f6x5-jh6r-wrfv GHSA-f6x5-jh6r-wrfv — golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read 2026-10-15T06:53:41.991984+00:00

Affected: Go: golang.org/x/crypto

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.