https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:35:25 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:1591 <p><strong>Affected:</strong> AlmaLinux:9: pcs, AlmaLinux:9: pcs-snmp</p> <p>The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.</p> <p>Security Fix(es):</p> <p>* webpack: avoid cross-realm objects (CVE-2023-28154)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: pcs, AlmaLinux:9: pcs-snmp</p> <p>The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.</p> <p>Security Fix(es):</p> <p>* webpack: avoid cross-realm objects (CVE-2023-28154)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:1591 https://cve.radiocsirt.org/vuln/brew-webpack-cve-2023-28154 <p><strong>Affected:</strong> Homebrew: webpack</p> <p>Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.</p> <p><strong>Affected:</strong> Homebrew: webpack</p> <p>Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.</p> https://cve.radiocsirt.org/vuln/brew-webpack-cve-2023-28154 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0106 certfr-2025-avi-0106 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0106 https://cve.radiocsirt.org/vuln/euvd-2026-219518 EUVD-2026-219518 https://cve.radiocsirt.org/vuln/euvd-2026-219518 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28154 <p>Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.</p> <p>Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-28154 https://cve.radiocsirt.org/vuln/ghsa-hc6q-2mpp-qw7j <p><strong>Affected:</strong> npm: webpack</p> <p>Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.</p> <p><strong>Affected:</strong> npm: webpack</p> <p>Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.</p> https://cve.radiocsirt.org/vuln/ghsa-hc6q-2mpp-qw7j https://cve.radiocsirt.org/vuln/gsd-2023-28154 gsd-2023-28154 https://cve.radiocsirt.org/vuln/gsd-2023-28154 https://cve.radiocsirt.org/vuln/msrc_cve-2023-28154 msrc_CVE-2023-28154 https://cve.radiocsirt.org/vuln/msrc_cve-2023-28154 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12803-1 <p>cockpit-d-installer-0.8.1~1-5.1 on GA media</p> <p>cockpit-d-installer-0.8.1~1-5.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12803-1 https://cve.radiocsirt.org/vuln/rhba-2023:4315 <p>webpack: avoid cross-realm objects</p> <p>webpack: avoid cross-realm objects</p> https://cve.radiocsirt.org/vuln/rhba-2023:4315 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28154 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-webpack, Ubuntu:20.04:LTS: node-webpack, Ubuntu:22.04:LTS: node-webpack, Ubuntu:24.04:LTS: node-webpack, Ubuntu:25.10: node-webpack, Ubuntu:26.04:LTS: node-webpack</p> <p>Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-webpack, Ubuntu:20.04:LTS: node-webpack, Ubuntu:22.04:LTS: node-webpack, Ubuntu:24.04:LTS: node-webpack, Ubuntu:25.10: node-webpack, Ubuntu:26.04:LTS: node-webpack</p> <p>Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28154 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0855 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente &#34;pcs&#34; ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente &#34;pcs&#34; ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0855