https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T12:47:06.103871+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-30251 EUVD-2026-30251 2026-10-20T12:47:06.107615+00:00 EUVD-2026-30251 https://cve.radiocsirt.org/vuln/fkie_cve-2021-38384 fkie_cve-2021-38384 2026-10-20T12:47:06.107653+00:00

Serverless Offline 8.0.0 returns a 403 HTTP status code for a route that has a trailing / character, which might cause a developer to implement incorrect access control, because the actual behavior within the Amazon AWS environment is a 200 HTTP status code (i.e., possibly greater than expected permissions).

 https://cve.radiocsirt.org/vuln/ghsa-h97f-5258-5593 GHSA-h97f-5258-5593 — Incorrect Authorization in serverless-offline 2026-10-20T12:47:06.107684+00:00

Affected: npm: serverless-offline

Serverless Offline 8.0.0 returns a 403 HTTP status code for a route that has a trailing `/` character, which might cause a developer to implement incorrect access control, because the actual behavior within the Amazon AWS environment is a 200 HTTP status code (i.e., possibly greater than expected permissions).

 https://cve.radiocsirt.org/vuln/gsd-2021-38384 gsd-2021-38384 2026-10-20T12:47:06.107708+00:00 gsd-2021-38384