https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:58:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-09421 bdu:2024-09421 https://cve.radiocsirt.org/vuln/bdu:2024-09421 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0579 certfr-2024-avi-0579 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0579 https://cve.radiocsirt.org/vuln/cleanstart-2026-pi37875 <p><strong>Affected:</strong> CleanStart: argo-workflows, CleanStart: azure-functions-node</p> <p>CVE-2024-4067 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: argo-workflows, CleanStart: azure-functions-node</p> <p>CVE-2024-4067 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-pi37875 https://cve.radiocsirt.org/vuln/euvd-2026-186106 EUVD-2026-186106 https://cve.radiocsirt.org/vuln/euvd-2026-186106 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4067 <p>The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the pattern `.*` will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the input while it doesn&#39;t find the closing bracket. As the input size increases, the consumption time will also increase until it causes the application to hang or slow down. There was a merged fix but further testing shows the issue persists. This issue should be mitigated by using a safe pattern that won&#39;t start backtracking the regular expression due to greedy matching. This issue was fixed in version 4.0.8.</p> <p>The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the pattern `.*` will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the input while it doesn&#39;t find the closing bracket. As the input size increases, the consumption time will also increase until it causes the application to hang or slow down. There was a merged fix but further testing shows the issue persists. This issue should be mitigated by using a safe pattern that won&#39;t start backtracking the regular expression due to greedy matching. This issue was fixed in version 4.0.8.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-4067 https://cve.radiocsirt.org/vuln/ghsa-952p-6rrq-rcjv <p><strong>Affected:</strong> npm: micromatch</p> <p>The NPM package `micromatch` prior to version 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the pattern `.*` will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the input while it doesn&#39;t find the closing bracket. As the input size increases, the consumption time will also increase until it causes the application to hang or slow down. There was a merged fix but further testing shows the issue persisted prior to https://github.com/micromatch/micromatch/pull/266. This issue should be mitigated by using a safe pattern that won&#39;t start backtracking the regular expression due to greedy matching.</p> <p><strong>Affected:</strong> npm: micromatch</p> <p>The NPM package `micromatch` prior to version 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the pattern `.*` will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the input while it doesn&#39;t find the closing bracket. As the input size increases, the consumption time will also increase until it causes the application to hang or slow down. There was a merged fix but further testing shows the issue persisted prior to https://github.com/micromatch/micromatch/pull/266. This issue should be mitigated by using a safe pattern that won&#39;t start backtracking the regular expression due to greedy matching.</p> https://cve.radiocsirt.org/vuln/ghsa-952p-6rrq-rcjv https://cve.radiocsirt.org/vuln/gsd-2024-4067 gsd-2024-4067 https://cve.radiocsirt.org/vuln/gsd-2024-4067 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14007-1 <p>jupyter-plotly-5.22.0-1.1 on GA media</p> <p>jupyter-plotly-5.22.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14007-1 https://cve.radiocsirt.org/vuln/rhba-2024:7523 <p>micromatch: vulnerable to Regular Expression Denial of Service braces: fails to limit the number of characters it can handle dset: Prototype Pollution golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses net/http: Denial of service due to improper 100-continue handling in net/http azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity urllib3: proxy-authorization request header is not stripped during cross-origin redirects fast-loops: prototype pollution via objectMergeDeep nodejs-async: Regular expression denial of service while parsing function in autoinject express: Improper Input Handling in Express Redirects serve-static: Improper Sanitization in serve-static</p> <p>micromatch: vulnerable to Regular Expression Denial of Service braces: fails to limit the number of characters it can handle dset: Prototype Pollution golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses net/http: Denial of service due to improper 100-continue handling in net/http azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity urllib3: proxy-authorization request header is not stripped during cross-origin redirects fast-loops: prototype pollution via objectMergeDeep nodejs-async: Regular expression denial of service while parsing function in autoinject express: Improper Input Handling in Express Redirects serve-static: Improper Sanitization in serve-static</p> https://cve.radiocsirt.org/vuln/rhba-2024:7523 https://cve.radiocsirt.org/vuln/suse-su-2024:3771-1 <p>Security update for pgadmin4</p> <p>Security update for pgadmin4</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3771-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-4067 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-micromatch, Ubuntu:20.04:LTS: node-micromatch, Ubuntu:22.04:LTS: node-micromatch, Ubuntu:24.04:LTS: node-micromatch, Ubuntu:25.10: node-micromatch, Ubuntu:26.04:LTS: node-micromatch</p> <p>The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the pattern `.*` will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the input while it doesn&#39;t find the closing bracket. As the input size increases, the consumption time will also increase until it causes the application to hang or slow down. There was a merged fix but further testing shows the issue persists. This issue should be mitigated by using a safe pattern that won&#39;t start backtracking the regular expression due to greedy matching. This issue was fixed in version 4.0.8.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-micromatch, Ubuntu:20.04:LTS: node-micromatch, Ubuntu:22.04:LTS: node-micromatch, Ubuntu:24.04:LTS: node-micromatch, Ubuntu:25.10: node-micromatch, Ubuntu:26.04:LTS: node-micromatch</p> <p>The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the pattern `.*` will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the input while it doesn&#39;t find the closing bracket. As the input size increases, the consumption time will also increase until it causes the application to hang or slow down. There was a merged fix but further testing shows the issue persists. This issue should be mitigated by using a safe pattern that won&#39;t start backtracking the regular expression due to greedy matching. This issue was fixed in version 4.0.8.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-4067 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1566 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1566