https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:15:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05169 bdu:2023-05169 https://cve.radiocsirt.org/vuln/bdu:2023-05169 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0484 certfr-2023-avi-0484 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0484 https://cve.radiocsirt.org/vuln/euvd-2026-8348 EUVD-2026-8348 https://cve.radiocsirt.org/vuln/euvd-2026-8348 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28155 <p>The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> <p>The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-28155 https://cve.radiocsirt.org/vuln/ghsa-p8p7-x288-28g6 <p><strong>Affected:</strong> npm: request, npm: @cypress/request</p> <p>The `request` package through 2.88.2 for Node.js and the `@cypress/request` package prior to 3.0.0 allow a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP).</p> <p>NOTE: The `request` package is no longer supported by the maintainer.</p> <p><strong>Affected:</strong> npm: request, npm: @cypress/request</p> <p>The `request` package through 2.88.2 for Node.js and the `@cypress/request` package prior to 3.0.0 allow a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP).</p> <p>NOTE: The `request` package is no longer supported by the maintainer.</p> https://cve.radiocsirt.org/vuln/ghsa-p8p7-x288-28g6 https://cve.radiocsirt.org/vuln/gsd-2023-28155 gsd-2023-28155 https://cve.radiocsirt.org/vuln/gsd-2023-28155 https://cve.radiocsirt.org/vuln/msrc_cve-2023-28155 msrc_CVE-2023-28155 https://cve.radiocsirt.org/vuln/msrc_cve-2023-28155 https://cve.radiocsirt.org/vuln/rhsa-2026:62115 <p>taffy: taffydb: Internal Property Tampering containerd: OCI image importer memory exhaustion request: bypass of SSRF mitigations when following a cross-protocol redirect npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation urllib3: urllib3 does not control redirects in browsers and Node.js ip: Node ip SSRF urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking</p> <p>taffy: taffydb: Internal Property Tampering containerd: OCI image importer memory exhaustion request: bypass of SSRF mitigations when following a cross-protocol redirect npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation urllib3: urllib3 does not control redirects in browsers and Node.js ip: Node ip SSRF urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking</p> https://cve.radiocsirt.org/vuln/rhsa-2026:62115 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28155 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: node-request, Ubuntu:16.04:LTS: node-request, Ubuntu:18.04:LTS: node-request, Ubuntu:20.04:LTS: node-request, Ubuntu:22.04:LTS: node-request, Ubuntu:24.04:LTS: node-request</p> <p>The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: node-request, Ubuntu:16.04:LTS: node-request, Ubuntu:18.04:LTS: node-request, Ubuntu:20.04:LTS: node-request, Ubuntu:22.04:LTS: node-request, Ubuntu:24.04:LTS: node-request</p> <p>The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28155 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1800 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL BigFix WebUI ausnutzen, um seine Privilegien zu erweitern, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL BigFix WebUI ausnutzen, um seine Privilegien zu erweitern, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1800