https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:54:30.808999+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-4428 CVE-2026-4428 — CRL Distribution Point Scope Check Logic Error in AWS-LC 2026-10-04T13:54:31.000139+00:00

Affected: AWS-LC, AWS-LC-FIPS

A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks.

To remediate this issue, users should upgrade to AWS-LC 1.71.0 or AWS-LC-FIPS-3.3.0.

 https://cve.radiocsirt.org/vuln/ghsa-2gh3-rmm4-6rq5 GHSA-2gh3-rmm4-6rq5 — Crash due to uncontrolled recursion in protobuf crate 2026-10-04T13:54:31.000217+00:00

Affected: crates.io: protobuf

Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.

This allows an attacker to cause a stack overflow when parsing the message on untrusted data.