https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T16:40:00.663106+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-58183 CVE-2025-58183 — Unbounded allocation when parsing GNU sparse map in archive/tar 2026-10-10T16:40:00.743049+00:00

Affected: Go standard library archive/tar

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.

 https://cve.radiocsirt.org/vuln/ghsa-f6x5-jh6r-wrfv GHSA-f6x5-jh6r-wrfv — golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read 2026-10-10T16:40:00.743186+00:00

Affected: Go: golang.org/x/crypto

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.