https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:07:53 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0021 certfr-2025-avi-0021 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0021 https://cve.radiocsirt.org/vuln/euvd-2026-258717 EUVD-2026-258717 https://cve.radiocsirt.org/vuln/euvd-2026-258717 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55565 <p>nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.</p> <p>nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-55565 https://cve.radiocsirt.org/vuln/ghsa-mwcw-c2x4-8c55 <p><strong>Affected:</strong> npm: nanoid</p> <p>When nanoid is called with a fractional value, there were a number of undesirable effects:</p> <p>1. in browser and non-secure, the code infinite loops on while (size--) 2. in node, the value of poolOffset becomes fractional, causing calls to nanoid to return zeroes until the pool is next filled 3. if the first call in node is a fractional argument, the initial buffer allocation fails with an error</p> <p>Version 3.3.8 and 5.0.9 are fixed.</p> <p><strong>Affected:</strong> npm: nanoid</p> <p>When nanoid is called with a fractional value, there were a number of undesirable effects:</p> <p>1. in browser and non-secure, the code infinite loops on while (size--) 2. in node, the value of poolOffset becomes fractional, causing calls to nanoid to return zeroes until the pool is next filled 3. if the first call in node is a fractional argument, the initial buffer allocation fails with an error</p> <p>Version 3.3.8 and 5.0.9 are fixed.</p> https://cve.radiocsirt.org/vuln/ghsa-mwcw-c2x4-8c55 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14663-1 <p>velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media</p> <p>velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14663-1 https://cve.radiocsirt.org/vuln/rhba-2025:0301 <p>golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto nanoid: nanoid mishandles non-integer values jinja2: Jinja has a sandbox breakout through malicious filenames jinja2: Jinja has a sandbox breakout through indirect reference to format method</p> <p>golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto nanoid: nanoid mishandles non-integer values jinja2: Jinja has a sandbox breakout through malicious filenames jinja2: Jinja has a sandbox breakout through indirect reference to format method</p> https://cve.radiocsirt.org/vuln/rhba-2025:0301 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-55565 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-postcss, Ubuntu:22.04:LTS: node-postcss, Ubuntu:24.04:LTS: node-postcss</p> <p>nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-postcss, Ubuntu:22.04:LTS: node-postcss, Ubuntu:24.04:LTS: node-postcss</p> <p>nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-55565 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0043 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0043