https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:38:23 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0073 certfr-2023-avi-0073 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0073 https://cve.radiocsirt.org/vuln/euvd-2026-198233 EUVD-2026-198233 https://cve.radiocsirt.org/vuln/euvd-2026-198233 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37601 <p>Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.</p> <p>Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-37601 https://cve.radiocsirt.org/vuln/ghsa-76p3-8jx3-jpfq <p><strong>Affected:</strong> npm: loader-utils</p> <p>Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils prior to version 2.0.3 via the name variable in parseQuery.js.</p> <p><strong>Affected:</strong> npm: loader-utils</p> <p>Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils prior to version 2.0.3 via the name variable in parseQuery.js.</p> https://cve.radiocsirt.org/vuln/ghsa-76p3-8jx3-jpfq https://cve.radiocsirt.org/vuln/gsd-2022-37601 gsd-2022-37601 https://cve.radiocsirt.org/vuln/gsd-2022-37601 https://cve.radiocsirt.org/vuln/msrc_cve-2022-37601 msrc_CVE-2022-37601 https://cve.radiocsirt.org/vuln/msrc_cve-2022-37601 https://cve.radiocsirt.org/vuln/rhsa-2023:0264 <p>jackson-databind: denial of service via a large depth of nested objects golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters golang: net/http: handle server errors after sending GOAWAY golang: net/url: JoinPath does not strip relative path components in all circumstances loader-utils: prototype pollution in function parseQuery in parseQuery.js golang: regexp/syntax: limit memory used by parsing regexps jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays</p> <p>jackson-databind: denial of service via a large depth of nested objects golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters golang: net/http: handle server errors after sending GOAWAY golang: net/url: JoinPath does not strip relative path components in all circumstances loader-utils: prototype pollution in function parseQuery in parseQuery.js golang: regexp/syntax: limit memory used by parsing regexps jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays</p> https://cve.radiocsirt.org/vuln/rhsa-2023:0264 https://cve.radiocsirt.org/vuln/rhsa-2023:6420 <p>grafana: persistent xss in grafana core plugins grafana: plugin signature bypass grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins loader-utils: prototype pollution in function parseQuery in parseQuery.js grafana: Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins grafana: email addresses and usernames cannot be trusted grafana: User enumeration via forget password grafana: Spoofing of the originalUrl parameter of snapshots golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests grafana: account takeover possible when using Azure AD OAuth golang: net/http, net/textproto: denial of service from excessive memory allocation</p> <p>grafana: persistent xss in grafana core plugins grafana: plugin signature bypass grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins loader-utils: prototype pollution in function parseQuery in parseQuery.js grafana: Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins grafana: email addresses and usernames cannot be trusted grafana: User enumeration via forget password grafana: Spoofing of the originalUrl parameter of snapshots golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests grafana: account takeover possible when using Azure AD OAuth golang: net/http, net/textproto: denial of service from excessive memory allocation</p> https://cve.radiocsirt.org/vuln/rhsa-2023:6420 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-37601 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-loader-utils, Ubuntu:20.04:LTS: node-loader-utils, Ubuntu:22.04:LTS: node-loader-utils, Ubuntu:24.04:LTS: node-loader-utils, Ubuntu:25.10: node-loader-utils, Ubuntu:26.04:LTS: node-loader-utils</p> <p>Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-loader-utils, Ubuntu:20.04:LTS: node-loader-utils, Ubuntu:22.04:LTS: node-loader-utils, Ubuntu:24.04:LTS: node-loader-utils, Ubuntu:25.10: node-loader-utils, Ubuntu:26.04:LTS: node-loader-utils</p> <p>Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-37601 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0157 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen Informationen offenzulegen oder einen Denial of Service zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen Informationen offenzulegen oder einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0157