https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:53:34.637294+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-47912 CVE-2025-47912 — Insufficient validation of bracketed IPv6 hostnames in net/url 2026-10-08T10:53:34.983846+00:00

Affected: Go standard library net/url

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.

 https://cve.radiocsirt.org/vuln/ghsa-f6x5-jh6r-wrfv GHSA-f6x5-jh6r-wrfv — golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read 2026-10-08T10:53:34.983922+00:00

Affected: Go: golang.org/x/crypto

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.