https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:12:16 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0073 certfr-2023-avi-0073 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0073 https://cve.radiocsirt.org/vuln/euvd-2026-239490 EUVD-2026-239490 https://cve.radiocsirt.org/vuln/euvd-2026-239490 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37603 <p>A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.</p> <p>A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-37603 https://cve.radiocsirt.org/vuln/ghsa-3rfm-jhwj-7488 <p><strong>Affected:</strong> npm: loader-utils</p> <p>A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take a disproportional amount of time to process. This issue has been patched in versions 1.4.2, 2.0.4 and 3.2.1.</p> <p><strong>Affected:</strong> npm: loader-utils</p> <p>A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take a disproportional amount of time to process. This issue has been patched in versions 1.4.2, 2.0.4 and 3.2.1.</p> https://cve.radiocsirt.org/vuln/ghsa-3rfm-jhwj-7488 https://cve.radiocsirt.org/vuln/gsd-2022-37603 gsd-2022-37603 https://cve.radiocsirt.org/vuln/gsd-2022-37603 https://cve.radiocsirt.org/vuln/msrc_cve-2022-37603 msrc_CVE-2022-37603 https://cve.radiocsirt.org/vuln/msrc_cve-2022-37603 https://cve.radiocsirt.org/vuln/rhsa-2022:8781 <p>jackson-databind: denial of service via a large depth of nested objects golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters golang: net/http: handle server errors after sending GOAWAY golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service loader-utils: Regular expression denial of service golang: regexp/syntax: limit memory used by parsing regexps jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays</p> <p>jackson-databind: denial of service via a large depth of nested objects golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters golang: net/http: handle server errors after sending GOAWAY golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service loader-utils: Regular expression denial of service golang: regexp/syntax: limit memory used by parsing regexps jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8781 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-37603 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-loader-utils, Ubuntu:20.04:LTS: node-loader-utils, Ubuntu:22.04:LTS: node-loader-utils, Ubuntu:24.04:LTS: node-loader-utils, Ubuntu:25.10: node-loader-utils, Ubuntu:26.04:LTS: node-loader-utils</p> <p>A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-loader-utils, Ubuntu:20.04:LTS: node-loader-utils, Ubuntu:22.04:LTS: node-loader-utils, Ubuntu:24.04:LTS: node-loader-utils, Ubuntu:25.10: node-loader-utils, Ubuntu:26.04:LTS: node-loader-utils</p> <p>A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-37603 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0809 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0809