https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:11:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02264 bdu:2022-02264 https://cve.radiocsirt.org/vuln/bdu:2022-02264 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1020 certfr-2023-avi-1020 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1020 https://cve.radiocsirt.org/vuln/euvd-2026-170844 EUVD-2026-170844 https://cve.radiocsirt.org/vuln/euvd-2026-170844 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23413 <p>This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.</p> <p>This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-23413 https://cve.radiocsirt.org/vuln/ghsa-jg8v-48h5-wgxg <p><strong>Affected:</strong> npm: jszip</p> <p>This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g `__proto__`, `toString`, etc) results in a returned object with a modified prototype instance.</p> <p><strong>Affected:</strong> npm: jszip</p> <p>This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g `__proto__`, `toString`, etc) results in a returned object with a modified prototype instance.</p> https://cve.radiocsirt.org/vuln/ghsa-jg8v-48h5-wgxg https://cve.radiocsirt.org/vuln/gsd-2021-23413 gsd-2021-23413 https://cve.radiocsirt.org/vuln/gsd-2021-23413 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23413 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-jszip, Ubuntu:20.04:LTS: node-jszip, Ubuntu:22.04:LTS: node-jszip, Ubuntu:24.04:LTS: node-jszip, Ubuntu:25.10: node-jszip, Ubuntu:26.04:LTS: node-jszip</p> <p>This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-jszip, Ubuntu:20.04:LTS: node-jszip, Ubuntu:22.04:LTS: node-jszip, Ubuntu:24.04:LTS: node-jszip, Ubuntu:25.10: node-jszip, Ubuntu:26.04:LTS: node-jszip</p> <p>This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23413 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1020 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1020