https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T16:15:10.807612+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-13281 CVE-2025-13281 — Portworx Half-Blind SSRF in kube-controller-manager 2026-10-14T16:15:10.825062+00:00

Affected: Kubernetes

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

 https://cve.radiocsirt.org/vuln/ghsa-6v2p-p543-phr9 GHSA-6v2p-p543-phr9 — golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability 2026-10-14T16:15:10.825126+00:00

Affected: Go: golang.org/x/oauth2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.