https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T18:21:15.390769+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-88787 cnvd-2022-88787 2026-10-12T18:21:15.394099+00:00 cnvd-2022-88787 https://cve.radiocsirt.org/vuln/euvd-2026-240533 EUVD-2026-240533 2026-10-12T18:21:15.394127+00:00 EUVD-2026-240533 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3326 fkie_cve-2022-3326 2026-10-12T18:21:15.394142+00:00

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.

 https://cve.radiocsirt.org/vuln/ghsa-8wxf-c45w-g66g GHSA-8wxf-c45w-g66g — rdiffweb vulnerable to password complexity bypass leading to weak passwords 2026-10-12T18:21:15.394168+00:00

Affected: PyPI: rdiffweb

ikus060/rdiffweb prior to 2.4.9 allows a user to set there password to all spaces. While rdiffweb has a password policy requiring passwords to be between 8 and 128 characters, it does not validate the password entropy, allowing users to bypass password complexity requirements with weak passwords. This issue has been fixed in version 2.4.9. No workarounds are known to exist.

 https://cve.radiocsirt.org/vuln/gsd-2022-3326 gsd-2022-3326 2026-10-12T18:21:15.394191+00:00 gsd-2022-3326 https://cve.radiocsirt.org/vuln/pysec-2022-297 PYSEC-2022-297 2026-10-12T18:21:15.394202+00:00

Affected: PyPI: rdiffweb

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.