https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T01:20:34.490233+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-50299 EUVD-2026-50299 2026-10-18T01:20:34.493101+00:00 EUVD-2026-50299 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5479 fkie_cve-2019-5479 2026-10-18T01:20:34.493138+00:00

An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file).

 https://cve.radiocsirt.org/vuln/ghsa-xf27-jqwv-gf3r GHSA-xf27-jqwv-gf3r — Unintended Require in larvitbase-api 2026-10-18T01:20:34.493171+00:00

Affected: npm: larvitbase-api

Versions of `larvitbase-api` prior to 0.5.4 are vulnerable to an Unintended Require. The package exposes an API endpoint and passes a GET parameter unsanitized to an `require()` call. This allows attackers to execute any `.js` file in the same folder as the server is running.

## Recommendation

Upgrade to version 0.5.4 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-5479 gsd-2019-5479 2026-10-18T01:20:34.493198+00:00 gsd-2019-5479