https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:06:10.437786+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-339298 EUVD-2026-339298 2026-10-02T09:06:10.444452+00:00 EUVD-2026-339298 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45820 fkie_cve-2026-45820 2026-10-02T09:06:10.444489+00:00

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) but missing the required ZIP64 extra field tag 0x0001 causes z64e() to loop indefinitely due to out-of-bounds reads returning undefined, which coerces to 0, keeping the loop condition permanently true.

 https://cve.radiocsirt.org/vuln/ghsa-px8p-9vwx-vf98 GHSA-px8p-9vwx-vf98 — fflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives 2026-10-02T09:06:10.444522+00:00

Affected: npm: fflate

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) but missing the required ZIP64 extra field tag 0x0001 causes z64e() to loop indefinitely due to out-of-bounds reads returning undefined, which coerces to 0, keeping the loop condition permanently true.

 https://cve.radiocsirt.org/vuln/rhsa-2026:68690 RHSA-2026:68690 — Red Hat Security Advisory: Kiali 2.22.10 for Red Hat OpenShift Service Mesh 3.3 2026-10-02T09:06:10.444550+00:00

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal fflate: fflate: Denial of Service via crafted ZIP archives net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages dompurify: DOMPurify: Cross-Site Scripting via IN_PLACE sanitization js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3596 WID-SEC-W-2026-3596 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-02T09:06:10.444576+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um einen Cross-Site Scripting Angriff durchzuführen.