https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:11:49.191763+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-3290 CVE-2022-3290 — Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb 2026-10-07T23:11:49.193601+00:00

Affected: ikus060/rdiffweb

Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.

 https://cve.radiocsirt.org/vuln/ghsa-5v95-j4rr-6f3c GHSA-5v95-j4rr-6f3c — rdiffweb's unlimited username field length can lead to DoS 2026-10-07T23:11:49.193659+00:00

Affected: PyPI: rdiffweb

rdiffweb prior to 2.4.8 is vulnerable to a potential Dos attack via an unlimited length "username" field. This can result in excess memory consumption, or memory corruption, leading to a Denial of Service (DoS). This issue is patched in version 2.4.8. There are no known workarounds.