https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:51:14.058503+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-24786 CVE-2024-24786 — Infinite loop in JSON unmarshaling in google.golang.org/protobuf 2026-10-09T20:51:14.397713+00:00

Affected: google.golang.org/protobuf/encoding/protojson, google.golang.org/protobuf/internal/encoding/json

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

 https://cve.radiocsirt.org/vuln/ghsa-f6x5-jh6r-wrfv GHSA-f6x5-jh6r-wrfv — golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read 2026-10-09T20:51:14.397836+00:00

Affected: Go: golang.org/x/crypto

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.