https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:01:25.474937+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-242626 EUVD-2026-242626 2026-10-07T21:01:25.478008+00:00 EUVD-2026-242626 https://cve.radiocsirt.org/vuln/fkie_cve-2016-20021 fkie_cve-2016-20021 2026-10-07T21:01:25.478045+00:00

In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification. Unless emerge-webrsync is used, Portage is not vulnerable.

 https://cve.radiocsirt.org/vuln/ghsa-pw5x-x5jw-ccmh GHSA-pw5x-x5jw-ccmh — Gentoo Portage missing PGP validation of executed code 2026-10-07T21:01:25.478087+00:00

Affected: PyPI: portage

In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification.

 https://cve.radiocsirt.org/vuln/gsd-2016-20021 gsd-2016-20021 2026-10-07T21:01:25.478111+00:00 gsd-2016-20021 https://cve.radiocsirt.org/vuln/pysec-2024-10 PYSEC-2024-10 2026-10-07T21:01:25.478124+00:00

Affected: PyPI: portage

In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification. Unless emerge-webrsync is used, Portage is not vulnerable.