https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:59:50 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-785 certfr-2022-avi-785 https://cve.radiocsirt.org/vuln/certfr-2022-avi-785 https://cve.radiocsirt.org/vuln/cnvd-2021-37767 cnvd-2021-37767 https://cve.radiocsirt.org/vuln/cnvd-2021-37767 https://cve.radiocsirt.org/vuln/euvd-2026-26113 EUVD-2026-26113 https://cve.radiocsirt.org/vuln/euvd-2026-26113 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28918 <p>Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts.</p> <p>Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-28918 https://cve.radiocsirt.org/vuln/ghsa-4c7m-wxvm-r7gc <p><strong>Affected:</strong> npm: netmask</p> <p>Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts.</p> <p>:exclamation: NOTE: The fix for this issue was incomplete. A subsequent fix was made in version `2.0.1` which was assigned [CVE-2021-29418 / GHSA-pch5-whg9-qr2r](https://github.com/advisories/GHSA-pch5-whg9-qr2r). For complete protection from this vulnerability an upgrade to version 2.0.1 or later is recommended.</p> <p><strong>Affected:</strong> npm: netmask</p> <p>Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts.</p> <p>:exclamation: NOTE: The fix for this issue was incomplete. A subsequent fix was made in version `2.0.1` which was assigned [CVE-2021-29418 / GHSA-pch5-whg9-qr2r](https://github.com/advisories/GHSA-pch5-whg9-qr2r). For complete protection from this vulnerability an upgrade to version 2.0.1 or later is recommended.</p> https://cve.radiocsirt.org/vuln/ghsa-4c7m-wxvm-r7gc https://cve.radiocsirt.org/vuln/gsd-2021-28918 gsd-2021-28918 https://cve.radiocsirt.org/vuln/gsd-2021-28918 https://cve.radiocsirt.org/vuln/rhsa-2021:1499 <p>nodejs-glob-parent: Regular expression denial of service nodejs-underscore: Arbitrary code execution via the template function nodejs-is-svg: ReDoS via malicious string nodejs-netmask: improper input validation of octal input data nodejs-netmask: incorrectly parses an IP address that has octal integer with invalid character</p> <p>nodejs-glob-parent: Regular expression denial of service nodejs-underscore: Arbitrary code execution via the template function nodejs-is-svg: ReDoS via malicious string nodejs-netmask: improper input validation of octal input data nodejs-netmask: incorrectly parses an IP address that has octal integer with invalid character</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1499 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1354 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1354