https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:25:22.243571+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-60471 EUVD-2026-60471 2026-10-07T00:25:22.248518+00:00 EUVD-2026-60471 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25091 fkie_cve-2019-25091 2026-10-07T00:25:22.248571+00:00

A vulnerability classified as problematic has been found in nsupdate.info. This affects an unknown part of the file src/nsupdate/settings/base.py of the component CSRF Cookie Handler. The manipulation of the argument CSRF_COOKIE_HTTPONLY leads to cookie without 'httponly' flag. It is possible to initiate the attack remotely. The name of the patch is 60a3fe559c453bc36b0ec3e5dd39c1303640a59a. It is recommended to apply a patch to fix this issue. The identifier VDB-216909 was assigned to this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-mwvp-qr62-cvjx GHSA-mwvp-qr62-cvjx — nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag 2026-10-07T00:25:22.248623+00:00

Affected: PyPI: nsupdate

A vulnerability classified as problematic has been found in nsupdate.info. This affects an unknown part of the file `src/nsupdate/settings/base.py` of the component `CSRF Cookie Handler`. The manipulation of the argument `CSRF_COOKIE_HTTPONLY` leads to cookie without `httponly` flag. It is possible to initiate the attack remotely. The name of the patch is 60a3fe559c453bc36b0ec3e5dd39c1303640a59a. It is recommended to apply a patch to fix this issue. The identifier VDB-216909 was assigned to this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2019-25091 gsd-2019-25091 2026-10-07T00:25:22.248663+00:00 gsd-2019-25091 https://cve.radiocsirt.org/vuln/pysec-2026-885 PYSEC-2026-885 — nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag 2026-10-07T00:25:22.248682+00:00

Affected: PyPI: nsupdate

A vulnerability classified as problematic has been found in nsupdate.info. This affects an unknown part of the file `src/nsupdate/settings/base.py` of the component `CSRF Cookie Handler`. The manipulation of the argument `CSRF_COOKIE_HTTPONLY` leads to cookie without `httponly` flag. It is possible to initiate the attack remotely. The name of the patch is 60a3fe559c453bc36b0ec3e5dd39c1303640a59a. It is recommended to apply a patch to fix this issue. The identifier VDB-216909 was assigned to this vulnerability.