https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:40:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-25808 EUVD-2026-25808 https://cve.radiocsirt.org/vuln/euvd-2026-25808 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28092 <p>The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input for a very long time.</p> <p>The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input for a very long time.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-28092 https://cve.radiocsirt.org/vuln/ghsa-7r28-3m3f-r2pr <p><strong>Affected:</strong> npm: is-svg</p> <p>The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input.</p> <p><strong>Affected:</strong> npm: is-svg</p> <p>The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input.</p> https://cve.radiocsirt.org/vuln/ghsa-7r28-3m3f-r2pr https://cve.radiocsirt.org/vuln/gsd-2021-28092 gsd-2021-28092 https://cve.radiocsirt.org/vuln/gsd-2021-28092 https://cve.radiocsirt.org/vuln/rhsa-2021:1499 <p>nodejs-glob-parent: Regular expression denial of service nodejs-underscore: Arbitrary code execution via the template function nodejs-is-svg: ReDoS via malicious string nodejs-netmask: improper input validation of octal input data nodejs-netmask: incorrectly parses an IP address that has octal integer with invalid character</p> <p>nodejs-glob-parent: Regular expression denial of service nodejs-underscore: Arbitrary code execution via the template function nodejs-is-svg: ReDoS via malicious string nodejs-netmask: improper input validation of octal input data nodejs-netmask: incorrectly parses an IP address that has octal integer with invalid character</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1499 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1354 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1354