https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:32:15.660983+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380618 EUVD-2026-380618 2026-10-02T12:32:15.664411+00:00 EUVD-2026-380618 https://cve.radiocsirt.org/vuln/fkie_cve-2026-83589 fkie_cve-2026-83589 2026-10-02T12:32:15.664442+00:00

A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an arbitrary external website after authenticating. This open redirect can be leveraged to conduct phishing attacks or credential theft.

 https://cve.radiocsirt.org/vuln/ghsa-8c7h-7vm9-jhj3 GHSA-8c7h-7vm9-jhj3 2026-10-02T12:32:15.664472+00:00

A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an arbitrary external website after authenticating. This open redirect can be leveraged to conduct phishing attacks or credential theft.