https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:43:07.017614+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10531 bdu:2026-10531 2026-10-08T20:43:07.090755+00:00 bdu:2026-10531 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0882 certfr-2025-avi-0882 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un at… 2026-10-08T20:43:07.090796+00:00 certfr-2025-avi-0882 https://cve.radiocsirt.org/vuln/euvd-2026-269139 EUVD-2026-269139 2026-10-08T20:43:07.090815+00:00 EUVD-2026-269139 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59288 fkie_cve-2025-59288 2026-10-08T20:43:07.090828+00:00

Improper verification of cryptographic signature in Github: Playwright allows an unauthorized attacker to perform spoofing over an adjacent network.

 https://cve.radiocsirt.org/vuln/ghsa-7mvr-c777-76hp GHSA-7mvr-c777-76hp — Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate 2026-10-08T20:43:07.090855+00:00

Affected: npm: playwright

### Summary Use of `curl` with the `-k` (or `--insecure`) flag in installer scripts allows attackers to deliver arbitrary executables via Man-in-the-Middle (MitM) attacks. This can lead to full system compromise, as the downloaded files are installed as privileged applications.

### Details The following scripts in the `microsoft/playwright` repository at commit [`bee11cbc28f24bd18e726163d0b9b1571b4f26a8`](https://github.com/microsoft/playwright/commit/bee11cbc28f24bd18e726163d0b9b1571b4f26a8) use `curl -k` to fetch and install executable packages without verifying the authenticity of the SSL certificate:

- [`packages/playwright-core/bin/reinstall_chrome_beta_mac.sh`](https://github.com/microsoft/playwright/blob/bee11cbc28f24bd18e726163d0b9b1571b4f26a8/packages/playwright-core/bin/reinstall_chrome_beta_mac.sh) - [`packages/playwright-core/bin/reinstall_chrome_stable_mac.sh`](https://github.com/microsoft/playwright/blob/bee11cbc28f24bd18e726163d0b9b1571b4f26a8/packages/playwright-core/bin/reinstall_chrome_stable_mac.sh) - [`packages/playwright-core/bin/reinstall_msedge_dev_mac.sh`](https://github.com/microsoft/playwright/blob/bee11cbc28f24bd18e726163d0b9b1571b4f26a8/packages/playwright-core/bin/reinstall_msedge_dev_mac.sh) - [`packages/playwright-core/bin/reinstall_msedge_beta_mac.sh`](https://github.com/microsoft/playwright/blob/bee11cbc28f24bd18e726163d0b9b1571b4f26a8/packages/playwright-core/bin/reinstall_msedge_beta_mac.sh) - [`packages/playwright-core/bin/reinstall_mse…

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-59288 msrc_CVE-2025-59288 — Playwright Spoofing Vulnerability 2026-10-08T20:43:07.090904+00:00 msrc_CVE-2025-59288