https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:34:51.510504+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-40608 cnvd-2020-40608 2026-10-17T12:34:51.514257+00:00 cnvd-2020-40608 https://cve.radiocsirt.org/vuln/euvd-2026-41561 EUVD-2026-41561 2026-10-17T12:34:51.514291+00:00 EUVD-2026-41561 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13110 fkie_cve-2020-13110 2026-10-17T12:34:51.514305+00:00

The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.

 https://cve.radiocsirt.org/vuln/ghsa-m2mx-rfpw-jghv GHSA-m2mx-rfpw-jghv — DLL Injection in kerberos 2026-10-17T12:34:51.514333+00:00

Affected: npm: kerberos

Version of `kerberos` prior to 1.0.0 are vulnerable to DLL Injection. The package loads DLLs without specifying a full path. This may allow attackers to create a file with the same name in a folder that precedes the intended file in the DLL path search. Doing so would allow attackers to execute arbitrary code in the machine.

## Recommendation

Upgrade to version 1.0.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2020-13110 gsd-2020-13110 2026-10-17T12:34:51.514358+00:00 gsd-2020-13110