https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T07:59:55.958483+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-90768 cnvd-2021-90768 2026-10-24T07:59:55.961583+00:00 cnvd-2021-90768 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41720 fkie_cve-2021-41720 2026-10-24T07:59:55.961616+00:00

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

 https://cve.radiocsirt.org/vuln/ghsa-8p5q-j9m2-g8wr Withdrawn: GHSA-8p5q-j9m2-g8wr — Withdrawn: Arbitrary code execution in lodash 2026-10-24T07:59:55.961645+00:00

Withdrawn by the publisher.

Affected: npm: lodash

# Withdrawn

GitHub has chosen to publish this CVE as a withdrawn advisory due to it not being a security issue. See [this issue](https://github.com/lodash/lodash/issues/5261) for more details.

# CVE description

"** DISPUTED ** A command injection vulnerability in Lodash 4.17.21 allows attackers to achieve arbitrary code execution via the template function. This is a different parameter, method, and version than CVE-2021-23337. NOTE: the vendor's position is that it's the developer's responsibility to ensure that a template does not evaluate code that originates from untrusted input.

 https://cve.radiocsirt.org/vuln/gsd-2021-41720 gsd-2021-41720 2026-10-24T07:59:55.961674+00:00 gsd-2021-41720 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-41720 Withdrawn: UBUNTU-CVE-2021-41720 2026-10-24T07:59:55.961687+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: node-lodash

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.