https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T03:20:04.878147+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-371999 EUVD-2026-371999 2026-10-09T03:20:04.880440+00:00 EUVD-2026-371999 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86255 fkie_cve-2026-86255 2026-10-09T03:20:04.880472+00:00

wger before 2.5 fails to validate the maximum duration of routine date ranges, allowing authenticated users to create routines spanning arbitrarily long periods. Attackers can trigger the date_sequence computation via routine detail endpoints, forcing the server to iterate thousands of times per request and exhaust worker threads, denying service to legitimate users.

 https://cve.radiocsirt.org/vuln/ghsa-vh7q-hj8h-q34m GHSA-vh7q-hj8h-q34m 2026-10-09T03:20:04.880504+00:00

wger before 2.5 fails to validate the maximum duration of routine date ranges, allowing authenticated users to create routines spanning arbitrarily long periods. Attackers can trigger the date_sequence computation via routine detail endpoints, forcing the server to iterate thousands of times per request and exhaust worker threads, denying service to legitimate users.