https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T21:31:33.239245+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01023 bdu:2024-01023 2026-10-12T21:31:33.243266+00:00 bdu:2024-01023 https://cve.radiocsirt.org/vuln/euvd-2026-341142 EUVD-2026-341142 2026-10-12T21:31:33.243294+00:00 EUVD-2026-341142 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21488 fkie_cve-2024-21488 2026-10-12T21:31:33.243307+00:00

Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function without input sanitization. If (attacker-controlled) user input is given to the mac_address_for function of the package, it is possible for the attacker to execute arbitrary commands on the operating system that this package is being run on.

 https://cve.radiocsirt.org/vuln/ghsa-vvh2-82c7-ppfg GHSA-vvh2-82c7-ppfg — network Arbitrary Command Injection vulnerability 2026-10-12T21:31:33.243333+00:00

Affected: npm: network

Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the `child_process` exec function without input sanitization. If (attacker-controlled) user input is given to the `mac_address_for` function of the package, it is possible for an attacker to execute arbitrary commands on the operating system that this package is being run on.

 https://cve.radiocsirt.org/vuln/gsd-2024-21488 gsd-2024-21488 2026-10-12T21:31:33.243355+00:00 gsd-2024-21488