https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T00:04:26.675078+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-22845 cnvd-2021-22845 2026-10-25T00:04:26.678306+00:00 cnvd-2021-22845 https://cve.radiocsirt.org/vuln/euvd-2026-36380 EUVD-2026-36380 2026-10-25T00:04:26.678336+00:00 EUVD-2026-36380 https://cve.radiocsirt.org/vuln/fkie_cve-2020-4066 fkie_cve-2020-4066 2026-10-25T00:04:26.678351+00:00

In Limdu before 0.95, the trainBatch function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This has been patched in 0.95.

 https://cve.radiocsirt.org/vuln/ghsa-77qv-gh6f-pgh4 GHSA-77qv-gh6f-pgh4 — Command Injection in Limdu 2026-10-25T00:04:26.678377+00:00

Affected: npm: limdu

### Impact The `trainBatch` function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability.

### Patches Patched in version 0.9.5.

### Workarounds Do not use trainBatch with classifiers that rely on shell execution, such as SVM Perf, SVM Linear or Adaboost

### References No

 https://cve.radiocsirt.org/vuln/gsd-2020-4066 gsd-2020-4066 2026-10-25T00:04:26.678402+00:00 gsd-2020-4066