https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:39:13.576262+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-37460 cnvd-2024-37460 2026-10-06T02:39:13.658639+00:00 cnvd-2024-37460 https://cve.radiocsirt.org/vuln/euvd-2026-158103 EUVD-2026-158103 2026-10-06T02:39:13.658677+00:00 EUVD-2026-158103 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42166 fkie_cve-2024-42166 2026-10-06T02:39:13.658693+00:00

The function "generate_app_certificates" in lib/app_certificates.js of FIWARE Keyrock <= 8.4 does not neutralize special elements used in an OS Command properly. This allows an authenticated user with permissions to create applications to execute commands by creating an application with a malicious name.

 https://cve.radiocsirt.org/vuln/ghsa-3949-74rr-85j5 GHSA-3949-74rr-85j5 2026-10-06T02:39:13.658726+00:00

The function "generate_app_certificates" in lib/app_certificates.js of FIWARE Keyrock <= 8.4 does not neutralize special elements used in an OS Command properly. This allows an authenticated user with permissions to create applications to execute commands by creating an application with a malicious name.