https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:03:54.783167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375423 EUVD-2026-375423 2026-10-02T09:03:54.831901+00:00 EUVD-2026-375423 https://cve.radiocsirt.org/vuln/fkie_cve-2026-89090 fkie_cve-2026-89090 2026-10-02T09:03:54.831936+00:00

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range.

To remediate this issue, users should upgrade to release-2026-03-23 or later, and patch any forked or derivative code.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11803-1 openSUSE-SU-2026:11803-1 — alloy-1.19.2-1.1 on GA media 2026-10-02T09:03:54.831978+00:00

alloy-1.19.2-1.1 on GA media