https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:17:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02114 bdu:2024-02114 https://cve.radiocsirt.org/vuln/bdu:2024-02114 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0145 certfr-2024-avi-0145 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0145 https://cve.radiocsirt.org/vuln/euvd-2026-258389 EUVD-2026-258389 https://cve.radiocsirt.org/vuln/euvd-2026-258389 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26159 <p>Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.</p> <p>Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26159 https://cve.radiocsirt.org/vuln/ghsa-jchw-25xp-jwwc <p><strong>Affected:</strong> npm: follow-redirects</p> <p>Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.</p> <p><strong>Affected:</strong> npm: follow-redirects</p> <p>Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.</p> https://cve.radiocsirt.org/vuln/ghsa-jchw-25xp-jwwc https://cve.radiocsirt.org/vuln/gsd-2023-26159 gsd-2023-26159 https://cve.radiocsirt.org/vuln/gsd-2023-26159 https://cve.radiocsirt.org/vuln/msrc_cve-2023-26159 msrc_CVE-2023-26159 https://cve.radiocsirt.org/vuln/msrc_cve-2023-26159 https://cve.radiocsirt.org/vuln/rhba-2024:0928 <p>follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse() jsrsasign: vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process</p> <p>follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse() jsrsasign: vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process</p> https://cve.radiocsirt.org/vuln/rhba-2024:0928 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-26159 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: node-follow-redirects, Ubuntu:Pro:20.04:LTS: node-follow-redirects, Ubuntu:Pro:22.04:LTS: node-follow-redirects</p> <p>Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: node-follow-redirects, Ubuntu:Pro:20.04:LTS: node-follow-redirects, Ubuntu:Pro:22.04:LTS: node-follow-redirects</p> <p>Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-26159 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0168 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0168