https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T14:05:39.143818+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261537 EUVD-2026-261537 2026-10-17T14:05:39.147594+00:00 EUVD-2026-261537 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3508 fkie_cve-2024-3508 2026-10-17T14:05:39.147638+00:00

A flaw was found in Bombastic, which allows authenticated users to upload compressed (bzip2 or zstd) SBOMs. The API endpoint verifies the presence of some fields and values in the JSON. To perform this verification, the uploaded file must first be decompressed.

 https://cve.radiocsirt.org/vuln/ghsa-r894-pxpx-j3m6 GHSA-r894-pxpx-j3m6 2026-10-17T14:05:39.147681+00:00

A flaw was found in Bombastic, which allows authenticated users to upload compressed (bzip2 or zstd) SBOMs. The API endpoint verifies the presence of some fields and values in the JSON. To perform this verification, the uploaded file must first be decompressed.

 https://cve.radiocsirt.org/vuln/gsd-2024-3508 gsd-2024-3508 2026-10-17T14:05:39.147706+00:00 gsd-2024-3508 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0815 WID-SEC-W-2024-0815 — bzip2: Schwachstelle ermöglicht Denial of Service 2026-10-17T14:05:39.147723+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in bzip2 ausnutzen, um einen Denial of Service Angriff durchzuführen.