https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:56:24 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-212613 EUVD-2026-212613 https://cve.radiocsirt.org/vuln/euvd-2026-212613 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1894 <p>A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.</p> <p>A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1894 https://cve.radiocsirt.org/vuln/ghsa-x5cv-mqxq-8q96 <p>A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.</p> <p>A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.</p> https://cve.radiocsirt.org/vuln/ghsa-x5cv-mqxq-8q96 https://cve.radiocsirt.org/vuln/gsd-2023-1894 gsd-2023-1894 https://cve.radiocsirt.org/vuln/gsd-2023-1894 https://cve.radiocsirt.org/vuln/rhsa-2023:6818 <p>kubeclient: kubeconfig parsing error can lead to MITM attacks openssl: c_rehash script allows command injection openssl: the c_rehash script allows command injection Pulp: Tokens stored in plaintext foreman: OS command injection via ct_command and fcct_command satellite: Blind SSRF via Referer header python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests rubygem-activerecord: Denial of Service rubygem-rack: denial of service in Content-Disposition parsing rubygem-rack: denial of service in Content-Disposition parsing rubygem-rack: denial of service in Content-Disposition parsing ruby-git: code injection vulnerability ruby-git: code injection vulnerability Foreman: Arbitrary code execution through templates Foreman: Stored cross-site scripting in host tab puppet: Puppet Server ReDoS rubygem-actionpack: Denial of Service in Action Dispatch rubygem-activerecord: SQL Injection rubygem-actionpack: Denial of Service in Action Dispatch rubygem-activesupport: Regular Expression Denial of Service rubygem-globalid: ReDoS vulnerability rubygem-rack: Denial of service in Multipart MIME parsing rubygem-rack: denial of service in header parsing golang: net/http: insufficient sanitization of Host header sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) python-django: Potential bypass o…</p> <p>kubeclient: kubeconfig parsing error can lead to MITM attacks openssl: c_rehash script allows command injection openssl: the c_rehash script allows command injection Pulp: Tokens stored in plaintext foreman: OS command injection via ct_command and fcct_command satellite: Blind SSRF via Referer header python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests rubygem-activerecord: Denial of Service rubygem-rack: denial of service in Content-Disposition parsing rubygem-rack: denial of service in Content-Disposition parsing rubygem-rack: denial of service in Content-Disposition parsing ruby-git: code injection vulnerability ruby-git: code injection vulnerability Foreman: Arbitrary code execution through templates Foreman: Stored cross-site scripting in host tab puppet: Puppet Server ReDoS rubygem-actionpack: Denial of Service in Action Dispatch rubygem-activerecord: SQL Injection rubygem-actionpack: Denial of Service in Action Dispatch rubygem-activesupport: Regular Expression Denial of Service rubygem-globalid: ReDoS vulnerability rubygem-rack: Denial of service in Multipart MIME parsing rubygem-rack: denial of service in header parsing golang: net/http: insufficient sanitization of Host header sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) python-django: Potential bypass o…</p> https://cve.radiocsirt.org/vuln/rhsa-2023:6818 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1894 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: puppet, Ubuntu:Pro:16.04:LTS: puppet, Ubuntu:18.04:LTS: puppet, Ubuntu:20.04:LTS: puppet, Ubuntu:22.04:LTS: puppet, Ubuntu:24.04:LTS: puppetserver, Ubuntu:25.10: puppetserver, Ubuntu:26.04:LTS: puppetserver</p> <p>A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: puppet, Ubuntu:Pro:16.04:LTS: puppet, Ubuntu:18.04:LTS: puppet, Ubuntu:20.04:LTS: puppet, Ubuntu:22.04:LTS: puppet, Ubuntu:24.04:LTS: puppetserver, Ubuntu:25.10: puppetserver, Ubuntu:26.04:LTS: puppetserver</p> <p>A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1894