https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:41:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-01468 bdu:2026-01468 https://cve.radiocsirt.org/vuln/bdu:2026-01468 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0045 certfr-2025-avi-0045 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0045 https://cve.radiocsirt.org/vuln/cleanstart-2026-bk66130 <p><strong>Affected:</strong> CleanStart: argo-workflows</p> <p>CVE-2024-52798 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: argo-workflows</p> <p>CVE-2024-52798 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-bk66130 https://cve.radiocsirt.org/vuln/euvd-2026-211841 EUVD-2026-211841 https://cve.radiocsirt.org/vuln/euvd-2026-211841 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52798 <p>path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.</p> <p>path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-52798 https://cve.radiocsirt.org/vuln/ghsa-rhx6-c78j-4q9w <p><strong>Affected:</strong> npm: path-to-regexp</p> <p>### Impact</p> <p>The regular expression that is vulnerable to backtracking can be generated in versions before 0.1.12 of `path-to-regexp`, originally reported in CVE-2024-45296</p> <p>### Patches</p> <p>Upgrade to 0.1.12.</p> <p>### Workarounds</p> <p>Avoid using two parameters within a single path segment, when the separator is not `.` (e.g. no `/:a-:b`). Alternatively, you can define the regex used for both parameters and ensure they do not overlap to allow backtracking.</p> <p>### References</p> <p>- https://github.com/advisories/GHSA-9wv6-86v2-598j - https://blakeembrey.com/posts/2024-09-web-redos/</p> <p><strong>Affected:</strong> npm: path-to-regexp</p> <p>### Impact</p> <p>The regular expression that is vulnerable to backtracking can be generated in versions before 0.1.12 of `path-to-regexp`, originally reported in CVE-2024-45296</p> <p>### Patches</p> <p>Upgrade to 0.1.12.</p> <p>### Workarounds</p> <p>Avoid using two parameters within a single path segment, when the separator is not `.` (e.g. no `/:a-:b`). Alternatively, you can define the regex used for both parameters and ensure they do not overlap to allow backtracking.</p> <p>### References</p> <p>- https://github.com/advisories/GHSA-9wv6-86v2-598j - https://blakeembrey.com/posts/2024-09-web-redos/</p> https://cve.radiocsirt.org/vuln/ghsa-rhx6-c78j-4q9w https://cve.radiocsirt.org/vuln/msrc_cve-2024-52798 msrc_CVE-2024-52798 https://cve.radiocsirt.org/vuln/msrc_cve-2024-52798 https://cve.radiocsirt.org/vuln/rhba-2025:0409 <p>golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x nanoid: nanoid mishandles non-integer values jinja2: Jinja has a sandbox breakout through malicious filenames jinja2: Jinja has a sandbox breakout through indirect reference to format method systeminformation: Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation</p> <p>golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x nanoid: nanoid mishandles non-integer values jinja2: Jinja has a sandbox breakout through malicious filenames jinja2: Jinja has a sandbox breakout through indirect reference to format method systeminformation: Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation</p> https://cve.radiocsirt.org/vuln/rhba-2025:0409 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-52798 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-path-to-regexp, Ubuntu:18.04:LTS: node-path-to-regexp, Ubuntu:20.04:LTS: node-path-to-regexp, Ubuntu:22.04:LTS: node-path-to-regexp, Ubuntu:24.04:LTS: node-path-to-regexp, Ubuntu:25.10: node-express, Ubuntu:25.10: node-path-to-regexp, Ubuntu:26.04:LTS: node-express, Ubuntu:26.04:LTS: node-path-to-regexp</p> <p>path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-path-to-regexp, Ubuntu:18.04:LTS: node-path-to-regexp, Ubuntu:20.04:LTS: node-path-to-regexp, Ubuntu:22.04:LTS: node-path-to-regexp, Ubuntu:24.04:LTS: node-path-to-regexp, Ubuntu:25.10: node-express, Ubuntu:25.10: node-path-to-regexp, Ubuntu:26.04:LTS: node-express, Ubuntu:26.04:LTS: node-path-to-regexp</p> <p>path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-52798 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0043 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0043