https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T18:57:24.059113+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-166137 EUVD-2026-166137 2026-10-23T18:57:24.119357+00:00 EUVD-2026-166137 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23420 fkie_cve-2021-23420 2026-10-23T18:57:24.119392+00:00

This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializing user input without validation.

 https://cve.radiocsirt.org/vuln/ghsa-4574-qv3w-fcmg GHSA-4574-qv3w-fcmg — Deserialization of Untrusted Data in codeception/codeception 2026-10-23T18:57:24.119424+00:00

Affected: Packagist: codeception/codeception

This affects the package codeception/codeception from 4.0.0 before 4.1.22 and before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializing user input without validation.

 https://cve.radiocsirt.org/vuln/gsd-2021-23420 gsd-2021-23420 2026-10-23T18:57:24.119450+00:00 gsd-2021-23420