https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:10:47.617856+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:5360 ALSA-2023:5360 — Important: nodejs:16 security, bug fix, and enhancement update 2026-10-02T12:10:47.990147+00:00

Affected: AlmaLinux:8: nodejs, AlmaLinux:8: nodejs-devel, AlmaLinux:8: nodejs-docs, AlmaLinux:8: nodejs-full-i18n, AlmaLinux:8: nodejs-nodemon, AlmaLinux:8: nodejs-packaging, AlmaLinux:8: npm

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (16). (BZ#2233891)

Security Fix(es):

* nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002) * nodejs-semver: Regular expression denial of service (CVE-2022-25883) * nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006) * nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* nodejs:16/nodejs: nodejs.prov doesn't generate the bundled dependency for modules starting @ like @colors/colors (BZ#2237394)

 https://cve.radiocsirt.org/vuln/bdu:2023-04976 bdu:2023-04976 2026-10-02T12:10:47.990230+00:00 bdu:2023-04976 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0705 certfr-2023-avi-0705 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-02T12:10:47.990256+00:00 certfr-2023-avi-0705 https://cve.radiocsirt.org/vuln/euvd-2026-206311 EUVD-2026-206311 2026-10-02T12:10:47.990273+00:00 EUVD-2026-206311 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25883 fkie_cve-2022-25883 2026-10-02T12:10:47.990285+00:00

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

 https://cve.radiocsirt.org/vuln/ghsa-c2qf-rxjj-qqgw GHSA-c2qf-rxjj-qqgw — semver vulnerable to Regular Expression Denial of Service 2026-10-02T12:10:47.990308+00:00

Affected: npm: semver

Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

 https://cve.radiocsirt.org/vuln/gsd-2022-25883 gsd-2022-25883 2026-10-02T12:10:47.990331+00:00 gsd-2022-25883 https://cve.radiocsirt.org/vuln/msrc_cve-2022-25883 msrc_CVE-2022-25883 — Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the func… 2026-10-02T12:10:47.990342+00:00 msrc_CVE-2022-25883 https://cve.radiocsirt.org/vuln/ncsc-2026-0034 NCSC-2026-0034 — Kwetsbaarheden verholpen in Atlassian producten 2026-10-02T12:10:47.990359+00:00 NCSC-2026-0034 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14012-1 openSUSE-SU-2024:14012-1 — system-user-velociraptor-1.0.0-9.1 on GA media 2026-10-02T12:10:47.990407+00:00

system-user-velociraptor-1.0.0-9.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:4341 RHSA-2023:4341 — Red Hat Security Advisory: Logging Subsystem 5.7.4 - Red Hat OpenShift bug fix and security update 2026-10-02T12:10:47.990423+00:00

nodejs-semver: Regular expression denial of service rubygem-activesupport: Regular Expression Denial of Service

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25883 UBUNTU-CVE-2022-25883 2026-10-02T12:10:47.990441+00:00

Affected: Ubuntu:Pro:14.04:LTS: node-semver, Ubuntu:Pro:16.04:LTS: node-semver, Ubuntu:18.04:LTS: node-semver, Ubuntu:20.04:LTS: node-semver, Ubuntu:22.04:LTS: node-semver, Ubuntu:24.04:LTS: node-semver, Ubuntu:25.10: node-semver, Ubuntu:26.04:LTS: node-semver

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2356 WID-SEC-W-2023-2356 — IBM QRadar SIEM: Mehre Schwachstellen 2026-10-02T12:10:47.990469+00:00

Ein anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.