https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:57:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06268 bdu:2024-06268 https://cve.radiocsirt.org/vuln/bdu:2024-06268 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0692 certfr-2024-avi-0692 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0692 https://cve.radiocsirt.org/vuln/euvd-2026-6098 EUVD-2026-6098 https://cve.radiocsirt.org/vuln/euvd-2026-6098 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39008 <p>robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.</p> <p>robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39008 https://cve.radiocsirt.org/vuln/ghsa-3q56-9cc2-46j4 <p><strong>Affected:</strong> npm: fast-loops</p> <p>robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function `objectMergeDeep`. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.</p> <p><strong>Affected:</strong> npm: fast-loops</p> <p>robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function `objectMergeDeep`. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.</p> https://cve.radiocsirt.org/vuln/ghsa-3q56-9cc2-46j4 https://cve.radiocsirt.org/vuln/rhba-2024:7523 <p>micromatch: vulnerable to Regular Expression Denial of Service braces: fails to limit the number of characters it can handle dset: Prototype Pollution golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses net/http: Denial of service due to improper 100-continue handling in net/http azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity urllib3: proxy-authorization request header is not stripped during cross-origin redirects fast-loops: prototype pollution via objectMergeDeep nodejs-async: Regular expression denial of service while parsing function in autoinject express: Improper Input Handling in Express Redirects serve-static: Improper Sanitization in serve-static</p> <p>micromatch: vulnerable to Regular Expression Denial of Service braces: fails to limit the number of characters it can handle dset: Prototype Pollution golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses net/http: Denial of service due to improper 100-continue handling in net/http azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity urllib3: proxy-authorization request header is not stripped during cross-origin redirects fast-loops: prototype pollution via objectMergeDeep nodejs-async: Regular expression denial of service while parsing function in autoinject express: Improper Input Handling in Express Redirects serve-static: Improper Sanitization in serve-static</p> https://cve.radiocsirt.org/vuln/rhba-2024:7523