https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T00:24:29.295904+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280355 EUVD-2026-280355 2026-10-13T00:24:29.338313+00:00 EUVD-2026-280355 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5602 fkie_cve-2026-5602 2026-10-13T00:24:29.338344+00:00

A vulnerability was determined in Nor2-io heim-mcp up to 0.1.3. Impacted is the function registerTools of the file src/tools.ts of the component new_heim_application/deploy_heim_application/deploy_heim_application_to_cloud. This manipulation causes os command injection. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Patch name: c321d8af25f77668781e6ccb43a1336f9185df37. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

 https://cve.radiocsirt.org/vuln/ghsa-wx4p-jr66-jfp9 GHSA-wx4p-jr66-jfp9 — @nor2/heim-mcp vulnerable to command injection 2026-10-13T00:24:29.338375+00:00

Affected: npm: @nor2/heim-mcp

A vulnerability was determined in Nor2-io heim-mcp up to 0.1.3. Impacted is the function registerTools of the file src/tools.ts of the component new_heim_application/deploy_heim_application/deploy_heim_application_to_cloud. This manipulation causes os command injection. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Patch name: c321d8af25f77668781e6ccb43a1336f9185df37. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.