https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T13:05:36.648227+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-ct39828 Withdrawn: CLEANSTART-2026-CT39828 — Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with… 2026-10-10T13:05:36.680557+00:00

Withdrawn by the publisher.

Affected: CleanStart: chartmuseum-fips

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cve-2023-29401 CVE-2023-29401 — Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin 2026-10-10T13:05:36.680659+00:00

Affected: github.com/gin-gonic/gin

The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of "setup.bat";x=.txt" will be sent as a file named "setup.bat". If the FileAttachment function is called with names provided by an untrusted source, this may permit an attacker to cause a file to be served with a name different than provided. Maliciously crafted attachment file name can modify the Content-Disposition header.