https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:29:31.639247+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331373 EUVD-2026-331373 2026-10-08T03:29:31.693243+00:00 EUVD-2026-331373 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53433 fkie_cve-2026-53433 2026-10-08T03:29:31.693276+00:00

fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity (O(n²)). A crafted POST request with many small segments can trigger excessive CPU usage during request handling.This allows a single malicious request to monopolize the single‑threaded HTTP server, blocking all other clients and resulting in denial of service.

This issue was fixed in version 0.73.1.

 https://cve.radiocsirt.org/vuln/ghsa-mvmf-94v6-879g GHSA-mvmf-94v6-879g — fzf vulnerable to denial of service through quadratic HTTP request-body accumulation 2026-10-08T03:29:31.693313+00:00

Affected: Go: github.com/junegunn/fzf

fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity (O(n²)). A crafted POST request with many small segments can trigger excessive CPU usage during request handling.This allows a single malicious request to monopolize the single‑threaded HTTP server, blocking all other clients and resulting in denial of service.

This issue was fixed in version 0.73.1.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-53433 UBUNTU-CVE-2026-53433 2026-10-08T03:29:31.693341+00:00

Affected: Ubuntu:20.04:LTS: fzf, Ubuntu:22.04:LTS: fzf, Ubuntu:24.04:LTS: fzf, Ubuntu:25.10: fzf, Ubuntu:26.04:LTS: fzf

fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity (O(n²)). A crafted POST request with many small segments can trigger excessive CPU usage during request handling.This allows a single malicious request to monopolize the single‑threaded HTTP server, blocking all other clients and resulting in denial of service. This issue was fixed in version 0.73.1.