https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:49:36.413793+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-364997 EUVD-2026-364997 2026-10-05T16:49:36.468310+00:00 EUVD-2026-364997 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86205 fkie_cve-2026-86205 2026-10-05T16:49:36.468355+00:00

h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack() utility that fails to sanitize protocol-relative paths in the Referer header pathname. Attackers can craft a same-origin URL with a double-slash path segment that passes origin validation but produces a Location header interpreted by browsers as a protocol-relative redirect to an external domain.

 https://cve.radiocsirt.org/vuln/ghsa-vhx4-2r84-67h4 GHSA-vhx4-2r84-67h4 2026-10-05T16:49:36.468393+00:00

h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack() utility that fails to sanitize protocol-relative paths in the Referer header pathname. Attackers can craft a same-origin URL with a double-slash path segment that passes origin validation but produces a Location header interpreted by browsers as a protocol-relative redirect to an external domain.