https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:03:02.662406+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14992 bdu:2026-14992 2026-10-02T11:03:02.741098+00:00 bdu:2026-14992 https://cve.radiocsirt.org/vuln/cleanstart-2026-bp02821 Withdrawn: CLEANSTART-2026-BP02821 — Security fixes for CVE-2025-68121, CVE-2026-1229, CVE-2026-27145, CVE-2026-29181, CVE-2026-32952, CVE-2026-33811, CVE-2… 2026-10-02T11:03:02.741137+00:00

Withdrawn by the publisher.

Affected: CleanStart: rclone

Multiple security vulnerabilities affect the rclone package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-323369 EUVD-2026-323369 2026-10-02T11:03:02.741175+00:00 EUVD-2026-323369 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46599 fkie_cve-2026-46599 2026-10-02T11:03:02.741189+00:00

The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.

 https://cve.radiocsirt.org/vuln/ghsa-q675-qj96-32m9 GHSA-q675-qj96-32m9 — golang.org/x/image/tiff has excessive resource consumption in PackBits decompression 2026-10-02T11:03:02.741218+00:00

Affected: Go: golang.org/x/image

The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.

 https://cve.radiocsirt.org/vuln/rhsa-2026:48151 RHSA-2026:48151 — Red Hat Security Advisory: Red Hat build of Cryostat security update 2026-10-02T11:03:02.741241+00:00

undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy form-data: form-data: Form field override via CRLF injection undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation protobufjs: protobufjs: Denial of Service via crafted sche…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-46599 UBUNTU-CVE-2026-46599 2026-10-02T11:03:02.741319+00:00

Affected: Ubuntu:18.04:LTS: golang-golang-x-image, Ubuntu:20.04:LTS: golang-golang-x-image, Ubuntu:22.04:LTS: golang-golang-x-image, Ubuntu:24.04:LTS: golang-golang-x-image, Ubuntu:25.10: golang-golang-x-image, Ubuntu:26.04:LTS: golang-golang-x-image

The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.