https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:21:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02583 bdu:2024-02583 https://cve.radiocsirt.org/vuln/bdu:2024-02583 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1025 certfr-2022-avi-1025 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1025 https://cve.radiocsirt.org/vuln/euvd-2026-173473 EUVD-2026-173473 https://cve.radiocsirt.org/vuln/euvd-2026-173473 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7753 <p>All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().</p> <p>All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7753 https://cve.radiocsirt.org/vuln/ghsa-w5p7-h5w8-2hfq <p><strong>Affected:</strong> npm: trim</p> <p>All versions of package trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().</p> <p><strong>Affected:</strong> npm: trim</p> <p>All versions of package trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().</p> https://cve.radiocsirt.org/vuln/ghsa-w5p7-h5w8-2hfq https://cve.radiocsirt.org/vuln/gsd-2020-7753 gsd-2020-7753 https://cve.radiocsirt.org/vuln/gsd-2020-7753 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12723-1 <p>grafana-9.3.6-1.1 on GA media</p> <p>grafana-9.3.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12723-1 https://cve.radiocsirt.org/vuln/rhsa-2026:34342 <p>nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function nodejs-trim-newlines: ReDoS in .end() method braces: fails to limit the number of characters it can handle golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html launch-editor: vite: launch-editor: Arbitrary command execution via insufficient file argument sanitization golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html golang.org/x/net/html: Infinite parsing loop in golang.org/x/net undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression undici: undici: Denial of Service via crafted WebSocket frame with large length undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter lodash: lodash: Arbitrary code execution via untrusted input in template imports path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies fast-uri: fast-uri: URI authority bypass due to improper delimiter handlin…</p> <p>nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function nodejs-trim-newlines: ReDoS in .end() method braces: fails to limit the number of characters it can handle golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html launch-editor: vite: launch-editor: Arbitrary command execution via insufficient file argument sanitization golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html golang.org/x/net/html: Infinite parsing loop in golang.org/x/net undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression undici: undici: Denial of Service via crafted WebSocket frame with large length undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter lodash: lodash: Arbitrary code execution via untrusted input in template imports path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies fast-uri: fast-uri: URI authority bypass due to improper delimiter handlin…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:34342 https://cve.radiocsirt.org/vuln/suse-ru-2024:0511-1 <p>Recommended update for grafana</p> <p>Recommended update for grafana</p> https://cve.radiocsirt.org/vuln/suse-ru-2024:0511-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1350 <p>Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise in diversen Komponenten von Drittanbietern ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise in diversen Komponenten von Drittanbietern ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1350