https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:42:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02595 bdu:2024-02595 https://cve.radiocsirt.org/vuln/bdu:2024-02595 https://cve.radiocsirt.org/vuln/certfr-2022-avi-767 certfr-2022-avi-767 https://cve.radiocsirt.org/vuln/certfr-2022-avi-767 https://cve.radiocsirt.org/vuln/euvd-2026-32332 EUVD-2026-32332 https://cve.radiocsirt.org/vuln/euvd-2026-32332 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43138 <p>In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.</p> <p>In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-43138 https://cve.radiocsirt.org/vuln/ghsa-fwr7-v2mv-hh25 <p><strong>Affected:</strong> npm: async</p> <p>A vulnerability exists in Async through 3.2.1 for 3.x and through 2.6.3 for 2.x (fixed in 3.2.2 and 2.6.4), which could let a malicious user obtain privileges via the `mapValues()` method.</p> <p><strong>Affected:</strong> npm: async</p> <p>A vulnerability exists in Async through 3.2.1 for 3.x and through 2.6.3 for 2.x (fixed in 3.2.2 and 2.6.4), which could let a malicious user obtain privileges via the `mapValues()` method.</p> https://cve.radiocsirt.org/vuln/ghsa-fwr7-v2mv-hh25 https://cve.radiocsirt.org/vuln/gsd-2021-43138 gsd-2021-43138 https://cve.radiocsirt.org/vuln/gsd-2021-43138 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12723-1 <p>grafana-9.3.6-1.1 on GA media</p> <p>grafana-9.3.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12723-1 https://cve.radiocsirt.org/vuln/rhsa-2023:0693 <p>async: Prototype Pollution in async golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters golang: net/http: handle server errors after sending GOAWAY golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service golang: net/url: JoinPath does not strip relative path components in all circumstances golang: regexp/syntax: limit memory used by parsing regexps golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests</p> <p>async: Prototype Pollution in async golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters golang: net/http: handle server errors after sending GOAWAY golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service golang: net/url: JoinPath does not strip relative path components in all circumstances golang: regexp/syntax: limit memory used by parsing regexps golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests</p> https://cve.radiocsirt.org/vuln/rhsa-2023:0693 https://cve.radiocsirt.org/vuln/suse-ru-2024:0511-1 <p>Recommended update for grafana</p> <p>Recommended update for grafana</p> https://cve.radiocsirt.org/vuln/suse-ru-2024:0511-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0909 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0909