https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T08:26:39.410379+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-2532 EUVD-2026-2532 2026-10-10T08:26:39.412314+00:00 EUVD-2026-2532 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4420 fkie_cve-2024-4420 2026-10-10T08:26:39.412347+00:00

There exists a Denial of service vulnerability in Tink-cc in versions prior to 2.1.3.  * An adversary can crash binaries using the crypto::tink::JsonKeysetReader in tink-cc by providing an input that is not an encoded JSON object, but still a valid encoded JSON element, for example a number or an array. This will crash as Tink just assumes any valid JSON input will contain an object.

* An adversary can crash binaries using the crypto::tink::JsonKeysetReader in tink-cc by providing an input containing many nested JSON objects. This may result in a stack overflow.

We recommend upgrading to version 2.1.3 or above

 https://cve.radiocsirt.org/vuln/ghsa-xhph-75hg-j96m GHSA-xhph-75hg-j96m 2026-10-10T08:26:39.412383+00:00

There exists a Denial of service vulnerability in Tink-cc in versions prior to 2.1.3.  * An adversary can crash binaries using the crypto::tink::JsonKeysetReader in tink-cc by providing an input that is not an encoded JSON object, but still a valid encoded JSON element, for example a number or an array. This will crash as Tink just assumes any valid JSON input will contain an object.

* An adversary can crash binaries using the crypto::tink::JsonKeysetReader in tink-cc by providing an input containing many nested JSON objects. This may result in a stack overflow.

We recommend upgrading to version 2.1.3 or above