https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T11:59:23.641820+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234894 EUVD-2026-234894 2026-10-21T11:59:23.649109+00:00 EUVD-2026-234894 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41642 fkie_cve-2022-41642 2026-10-21T11:59:23.649146+00:00

OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.

 https://cve.radiocsirt.org/vuln/ghsa-m8r5-7wf4-63mw GHSA-m8r5-7wf4-63mw — Nadesiko3 OS Command Injection vulnerability 2026-10-21T11:59:23.649182+00:00

Affected: npm: nadesiko3

OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.68 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.

Release notes for versions 3.3.62 and 3.3.69 both link to patches for this particular issue. The [JPCERT/CC](https://jvn.jp/en/jp/JVN56968681/index.html) advisory lists versions 3.3.68 and prior as vulnerable, and the most recent patch for this issue is tagged with version 3.3.69.

 https://cve.radiocsirt.org/vuln/gsd-2022-41642 gsd-2022-41642 2026-10-21T11:59:23.649210+00:00 gsd-2022-41642 https://cve.radiocsirt.org/vuln/jvndb-2022-000082 jvndb-2022-000082 2026-10-21T11:59:23.649222+00:00

Nadesiko3 provided by kujirahand contains multiple vulnerabilities listed below. <ul> <li>OS command injection vulnerability in processing compression and decompression (CWE-78) - CVE-2022-41642 </li> <li>Improper check or handling of exceptional conditions in nako3edit (CWE-703) - CVE-2022-41777 </li> <li>OS command injection vulnerability via &quot;file&quot; parameter in nako3edit (CWE-78) - CVE-2022-42496 </li> </ul> Satoki Tsuji reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.