https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:02:04.318980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-01010 bdu:2025-01010 2026-10-02T10:02:07.014023+00:00 bdu:2025-01010 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0214 certfr-2025-avi-0214 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T10:02:07.014085+00:00 certfr-2025-avi-0214 https://cve.radiocsirt.org/vuln/cleanstart-2026-bc52043 CLEANSTART-2026-BC52043 — Security fix for CVE-2024-45338 applied in: cfssl 1.5.0-r1, kserve-rest-proxy 0.12.0-r3, kube-fluentd-operator 1.18.2-r… 2026-10-02T10:02:07.014106+00:00

Affected: CleanStart: cfssl, CleanStart: kserve-rest-proxy, CleanStart: kube-fluentd-operator, CleanStart: kube-state-metrics, CleanStart: prometheus-pushgateway, CleanStart: prometheus-pushgateway-fips, CleanStart: runc

CVE-2024-45338 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-218590 EUVD-2026-218590 2026-10-02T10:02:07.014151+00:00 EUVD-2026-218590 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45338 fkie_cve-2024-45338 2026-10-02T10:02:07.014164+00:00

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-w32m-9786-jp63 GHSA-w32m-9786-jp63 — Non-linear parsing of case-insensitive content in golang.org/x/net/html 2026-10-02T10:02:07.014187+00:00

Affected: Go: golang.org/x/net/html

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-45338 msrc_CVE-2024-45338 — Non-linear parsing of case-insensitive content in golang.org/x/net/html 2026-10-02T10:02:07.014208+00:00 msrc_CVE-2024-45338 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14603-1 openSUSE-SU-2024:14603-1 — govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media 2026-10-02T10:02:07.014226+00:00

govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhba-2025:0409 RHBA-2025:0409 — Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.4.1 release. 2026-10-02T10:02:07.014246+00:00

golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x nanoid: nanoid mishandles non-integer values jinja2: Jinja has a sandbox breakout through malicious filenames jinja2: Jinja has a sandbox breakout through indirect reference to format method systeminformation: Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation

 https://cve.radiocsirt.org/vuln/suse-su-2025:0060-1 SUSE-SU-2025:0060-1 — Security update for govulncheck-vulndb 2026-10-02T10:02:07.014272+00:00

Security update for govulncheck-vulndb

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45338 UBUNTU-CVE-2024-45338 2026-10-02T10:02:07.014293+00:00

Affected: Ubuntu:Pro:16.04:LTS: golang-golang-x-net-dev, Ubuntu:Pro:16.04:LTS: juju-core, Ubuntu:Pro:18.04:LTS: golang-golang-x-net-dev, Ubuntu:20.04:LTS: adsys, Ubuntu:Pro:20.04:LTS: golang-golang-x-net-dev, Ubuntu:22.04:LTS: adsys, Ubuntu:Pro:22.04:LTS: golang-golang-x-net, Ubuntu:24.04:LTS: adsys, Ubuntu:Pro:24.04:LTS: golang-golang-x-net, Ubuntu:25.10: golang-golang-x-net and 1 more

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3728 WID-SEC-W-2024-3728 — Golang Go (x/net/html): Schwachstelle ermöglicht Denial of Service 2026-10-02T10:02:07.014327+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Golang Go im "x/net/html" Paket ausnutzen, um einen Denial of Service Angriff durchzuführen.