https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T11:57:56.069553+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21115 EUVD-2026-21115 2026-10-12T11:57:56.072910+00:00 EUVD-2026-21115 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3814 fkie_cve-2021-3814 2026-10-12T11:57:56.072936+00:00

It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure.

 https://cve.radiocsirt.org/vuln/ghsa-46fh-44xx-6xgh GHSA-46fh-44xx-6xgh 2026-10-12T11:57:56.072965+00:00

It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure.

 https://cve.radiocsirt.org/vuln/gsd-2021-3814 gsd-2021-3814 2026-10-12T11:57:56.072990+00:00 gsd-2021-3814 https://cve.radiocsirt.org/vuln/rhsa-2021:3851 RHSA-2021:3851 — Red Hat Security Advisory: Red Hat 3scale API Management 2.11.0 Release - Container Images 2026-10-12T11:57:56.073002+00:00

aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang RHOAM: XSS in 3scale at various places 3scale: missing validation of access token nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name