https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T22:18:39.332024+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-205846 EUVD-2026-205846 2026-10-09T22:18:39.415648+00:00 EUVD-2026-205846 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28387 fkie_cve-2023-28387 2026-10-09T22:18:39.415687+00:00

"NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard-coded credentials, which may allow a local attacker to analyze data in the app and to obtain API key for an external service.

 https://cve.radiocsirt.org/vuln/ghsa-vfpv-p335-c37j GHSA-vfpv-p335-c37j 2026-10-09T22:18:39.415722+00:00

"NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard-coded credentials, which may allow a local attacker to analyze data in the app and to obtain API key for an external service.

 https://cve.radiocsirt.org/vuln/gsd-2023-28387 gsd-2023-28387 2026-10-09T22:18:39.415740+00:00 gsd-2023-28387 https://cve.radiocsirt.org/vuln/jvndb-2023-000068 jvndb-2023-000068 2026-10-09T22:18:39.415752+00:00

"NewsPicks" App for Android and "NewsPicks" App for iOS provided by NewsPicks, Inc. use a hard-coded API key for an external service (CWE-798). Sunagawa Masanori of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.