https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:11:59.052745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0511 certfr-2026-avi-0511 — Une vulnérabilité a été découverte dans Elastic Package Registry. Elle permet à un attaquant de provoquer une atteinte… 2026-10-08T00:11:59.092891+00:00 certfr-2026-avi-0511 https://cve.radiocsirt.org/vuln/euvd-2026-307903 EUVD-2026-307903 2026-10-08T00:11:59.092938+00:00 EUVD-2026-307903 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33467 fkie_cve-2026-33467 2026-10-08T00:11:59.092954+00:00

Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the contents served to a self-hosted registry, to substitute a tampered package without the integrity check failing closed.

 https://cve.radiocsirt.org/vuln/ghsa-r727-5pf6-47r2 GHSA-r727-5pf6-47r2 — Elastic Package Registry has Improper Verification of Cryptographic Signature 2026-10-08T00:11:59.092985+00:00

Affected: Go: github.com/elastic/package-registry

Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the contents served to a self-hosted registry, to substitute a tampered package without the integrity check failing closed.