https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:12:54.775727+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7129 ALSA-2022:7129 — Moderate: git-lfs security and bug fix update 2026-10-02T12:12:55.661094+00:00

Affected: AlmaLinux:8: git-lfs

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension (CVE-2020-28851) * golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag (CVE-2020-28852) * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148) * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* git-lfs needs to be rebuild with golang 1.17.7-1 or above

 https://cve.radiocsirt.org/vuln/bdu:2022-05544 bdu:2022-05544 2026-10-02T12:12:55.661223+00:00 bdu:2022-05544 https://cve.radiocsirt.org/vuln/bell-cve-2022-27664 Withdrawn: BELL-CVE-2022-27664 — CVE-2022-27664 does not affect BellSoft software 2026-10-02T12:12:55.661258+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-golang-2022-27664 BIT-golang-2022-27664 2026-10-02T12:12:55.661286+00:00

Affected: Bitnami: golang

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1040 certfr-2022-avi-1040 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Protect. Certaines d'entre elles permettent à un atta… 2026-10-02T12:12:55.661321+00:00 certfr-2022-avi-1040 https://cve.radiocsirt.org/vuln/cleanstart-2024-ob04829 CLEANSTART-2024-OB04829 — In net/http in Go before 1 2026-10-02T12:12:55.661348+00:00

Affected: CleanStart: docker-cli-compose

Security vulnerability affects the docker-cli-compose package. In net/http in Go before 1.

 https://cve.radiocsirt.org/vuln/euvd-2026-15404 EUVD-2026-15404 2026-10-02T12:12:55.661380+00:00 EUVD-2026-15404 https://cve.radiocsirt.org/vuln/fkie_cve-2022-27664 fkie_cve-2022-27664 2026-10-02T12:12:55.661399+00:00

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

 https://cve.radiocsirt.org/vuln/ghsa-69cg-p879-7622 GHSA-69cg-p879-7622 — golang.org/x/net/http2 Denial of Service vulnerability 2026-10-02T12:12:55.661431+00:00

Affected: Go: golang.org/x/net, Go: golang.org/x/net/http2

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

 https://cve.radiocsirt.org/vuln/gsd-2022-27664 gsd-2022-27664 2026-10-02T12:12:55.661467+00:00 gsd-2022-27664 https://cve.radiocsirt.org/vuln/msrc_cve-2022-27664 msrc_CVE-2022-27664 — In net/http in Go before 1.18.6 and 1.19.x before 1.19.1 attackers can cause a denial of service because an HTTP/2 conn… 2026-10-02T12:12:55.661486+00:00 msrc_CVE-2022-27664 https://cve.radiocsirt.org/vuln/oesa-2022-1939 OESA-2022-1939 — golang security update 2026-10-02T12:12:55.661513+00:00

Affected: openEuler:20.03-LTS-SP1: golang, openEuler:20.03-LTS-SP3: golang, openEuler:22.03-LTS: golang

The Go Programming Language Security Fix(es): In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.(CVE-2022-27664)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12309-1 openSUSE-SU-2024:12309-1 — go1.18-1.18.6-1.1 on GA media 2026-10-02T12:12:55.661551+00:00

go1.18-1.18.6-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhba-2023:0564 RHBA-2023:0564 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11.26 packages update 2026-10-02T12:12:55.661579+00:00

golang: net/http: handle server errors after sending GOAWAY

 https://cve.radiocsirt.org/vuln/suse-el-9-client-tools-2023-2185 SUSE-EL-9-CLIENT-TOOLS-2023-2185 — Security update for SUSE Manager Client Tools 2026-10-02T12:12:55.661606+00:00

Security update for SUSE Manager Client Tools

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-27664 UBUNTU-CVE-2022-27664 2026-10-02T12:12:55.661632+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:Pro:16.04:LTS: golang-golang-x-net-dev, Ubuntu:Pro:16.04:LTS: juju-core, Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: google-guest-agent, Ubuntu:18.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.10 and 19 more

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2134 WID-SEC-W-2022-2134 — IBM Spectrum Protect: Mehrere Schwachstellen 2026-10-02T12:12:55.661723+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift ausnutzen, um einen Cross site Scripting Angriff durchzuführen, Informationen offenzulegen oder einen Denial of Service zu verursachen.