https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:22:39.650243+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-385801 EUVD-2026-385801 2026-10-12T22:22:39.695570+00:00 EUVD-2026-385801 https://cve.radiocsirt.org/vuln/fkie_cve-2026-108750 fkie_cve-2026-108750 2026-10-12T22:22:39.695602+00:00

OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents. Attackers can upload a small ODT, DOCX, or XLSX file whose XML entries decompress to hundreds of megabytes, crashing PHP workers and degrading availability.

 https://cve.radiocsirt.org/vuln/ghsa-94jr-pr3f-rpjh GHSA-94jr-pr3f-rpjh 2026-10-12T22:22:39.695634+00:00

OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents. Attackers can upload a small ODT, DOCX, or XLSX file whose XML entries decompress to hundreds of megabytes, crashing PHP workers and degrading availability.