https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:22:06.101922+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-200862 EUVD-2026-200862 2026-10-12T22:22:06.117350+00:00 EUVD-2026-200862 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21528 fkie_cve-2024-21528 2026-10-12T22:22:06.117387+00:00

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization.

 https://cve.radiocsirt.org/vuln/ghsa-g974-hxvm-x689 GHSA-g974-hxvm-x689 — node-gettext vulnerable to Prototype Pollution 2026-10-12T22:22:06.117420+00:00

Affected: npm: node-gettext

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization.

 https://cve.radiocsirt.org/vuln/gsd-2024-21528 gsd-2024-21528 2026-10-12T22:22:06.117443+00:00 gsd-2024-21528 https://cve.radiocsirt.org/vuln/rhsa-2025:1824 RHSA-2025:1824 — Red Hat Security Advisory: RHODF-4.17-RHEL-9 security update 2026-10-12T22:22:06.117455+00:00

PostCSS: Improper input validation in PostCSS node-gettext: Prototype Pollution golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html k8s.io/kubernetes: kubelet: node denial of service via kubelet checkpoint API