https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:18:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04663 bdu:2022-04663 https://cve.radiocsirt.org/vuln/bdu:2022-04663 https://cve.radiocsirt.org/vuln/euvd-2026-15082 EUVD-2026-15082 https://cve.radiocsirt.org/vuln/euvd-2026-15082 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26945 <p>go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.</p> <p>go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-26945 https://cve.radiocsirt.org/vuln/ghsa-x24g-9w7v-vprh <p><strong>Affected:</strong> Go: github.com/hashicorp/go-getter, Go: github.com/hashicorp/go-getter/v2, Go: github.com/hashicorp/go-getter/s3/v2, Go: github.com/hashicorp/go-getter/gcs/v2</p> <p>HashiCorp go-getter before 2.0.2 allows Command Injection.</p> <p><strong>Affected:</strong> Go: github.com/hashicorp/go-getter, Go: github.com/hashicorp/go-getter/v2, Go: github.com/hashicorp/go-getter/s3/v2, Go: github.com/hashicorp/go-getter/gcs/v2</p> <p>HashiCorp go-getter before 2.0.2 allows Command Injection.</p> https://cve.radiocsirt.org/vuln/ghsa-x24g-9w7v-vprh https://cve.radiocsirt.org/vuln/gsd-2022-26945 gsd-2022-26945 https://cve.radiocsirt.org/vuln/gsd-2022-26945 https://cve.radiocsirt.org/vuln/rhsa-2022:5069 <p>nanoid: Information disclosure via valueOf() function sanitize-url: XSS due to improper sanitization in sanitizeUrl function opencontainers: OCI manifest and index parsing confusion golang.org/x/crypto: empty plaintext packet causes panic minimist: prototype pollution node-fetch: exposure of sensitive information to an unauthorized actor prometheus/client_golang: Denial of service using InstrumentHandlerCounter go-getter: command injection vulnerability golang: crash in a golang.org/x/crypto/ssh server go-getter: writes SSH credentials into logfile, exposing sensitive credentials to local uses go-getter: unsafe download (issue 1 of 3) go-getter: unsafe download (issue 2 of 3) go-getter: unsafe download (issue 3 of 3)</p> <p>nanoid: Information disclosure via valueOf() function sanitize-url: XSS due to improper sanitization in sanitizeUrl function opencontainers: OCI manifest and index parsing confusion golang.org/x/crypto: empty plaintext packet causes panic minimist: prototype pollution node-fetch: exposure of sensitive information to an unauthorized actor prometheus/client_golang: Denial of service using InstrumentHandlerCounter go-getter: command injection vulnerability golang: crash in a golang.org/x/crypto/ssh server go-getter: writes SSH credentials into logfile, exposing sensitive credentials to local uses go-getter: unsafe download (issue 1 of 3) go-getter: unsafe download (issue 2 of 3) go-getter: unsafe download (issue 3 of 3)</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5069 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-26945 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:20.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:20.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:22.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:22.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:24.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:24.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:25.10: golang-github-hashicorp-go-getter</p> <p>go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:20.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:20.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:22.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:22.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:24.04:LTS: golang-github-hashicorp-go-getter, Ubuntu:24.04:LTS: golang-github-jesseduffield-go-getter, Ubuntu:25.10: golang-github-hashicorp-go-getter</p> <p>go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-26945 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0779 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0779