https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:27:17.388420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-1081 certfr-2024-avi-1081 — De multiples vulnérabilités ont été découvertes dans les produits IBM.Certaines d'entre elles permettent à un attaquant… 2026-10-07T21:27:17.472499+00:00 certfr-2024-avi-1081 https://cve.radiocsirt.org/vuln/euvd-2026-160322 EUVD-2026-160322 2026-10-07T21:27:17.472545+00:00 EUVD-2026-160322 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38372 fkie_cve-2024-38372 2026-10-07T21:27:17.472559+00:00

Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process. This has been patched in v6.19.2.

 https://cve.radiocsirt.org/vuln/ghsa-3g92-w8c5-73pq GHSA-3g92-w8c5-73pq — Undici vulnerable to data leak when using response.arrayBuffer() 2026-10-07T21:27:17.472590+00:00

Affected: npm: undici

### Impact

Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process.

### Patches

This has been patched in v6.19.2.

### Workarounds

There are no known workaround.

### References

https://github.com/nodejs/undici/issues/3337 https://github.com/nodejs/undici/issues/3328 https://github.com/nodejs/undici/pull/3338 https://github.com/nodejs/undici/commit/f979ec3204ca489abf30e7d20e9fee9ea7711d36

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38372 UBUNTU-CVE-2024-38372 2026-10-07T21:27:17.472619+00:00

Affected: Ubuntu:24.04:LTS: node-undici, Ubuntu:25.10: node-undici, Ubuntu:26.04:LTS: node-undici

Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process. This has been patched in v6.19.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1745 WID-SEC-W-2024-1745 — IBM App Connect Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-07T21:27:17.472642+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um Informationen offenzulegen.