https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:57:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-02476 bdu:2025-02476 https://cve.radiocsirt.org/vuln/bdu:2025-02476 https://cve.radiocsirt.org/vuln/bell-cve-2025-22870 <p><strong>Affected:</strong> Alpaquita:23: go, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:stream: go</p> <p><strong>Affected:</strong> Alpaquita:23: go, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:stream: go</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-22870 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0256 certfr-2025-avi-0256 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0256 https://cve.radiocsirt.org/vuln/cleanstart-2026-ba61304 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cosign</p> <p>Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cosign</p> <p>Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ba61304 https://cve.radiocsirt.org/vuln/euvd-2026-291791 EUVD-2026-291791 https://cve.radiocsirt.org/vuln/euvd-2026-291791 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22870 <p>Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to &#34;*.example.com&#34;, a request to &#34;[::1%25.example.com]:80` will incorrectly match and not be proxied.</p> <p>Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to &#34;*.example.com&#34;, a request to &#34;[::1%25.example.com]:80` will incorrectly match and not be proxied.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-22870 https://cve.radiocsirt.org/vuln/ghsa-qxp5-gwg8-xv66 <p><strong>Affected:</strong> Go: golang.org/x/net</p> <p>Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to &#34;*.example.com&#34;, a request to &#34;[::1%25.example.com]:80` will incorrectly match and not be proxied.</p> <p><strong>Affected:</strong> Go: golang.org/x/net</p> <p>Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to &#34;*.example.com&#34;, a request to &#34;[::1%25.example.com]:80` will incorrectly match and not be proxied.</p> https://cve.radiocsirt.org/vuln/ghsa-qxp5-gwg8-xv66 https://cve.radiocsirt.org/vuln/msrc_cve-2025-22870 msrc_CVE-2025-22870 https://cve.radiocsirt.org/vuln/msrc_cve-2025-22870 https://cve.radiocsirt.org/vuln/oesa-2025-1427 <p><strong>Affected:</strong> openEuler:24.03-LTS: golang, openEuler:24.03-LTS-SP1: golang, openEuler:20.03-LTS-SP4: golang, openEuler:22.03-LTS-SP3: golang, openEuler:22.03-LTS-SP4: golang</p> <p>. Security Fix(es):</p> <p>Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to &amp;quot;*.example.com&amp;quot;, a request to &amp;quot;[::1%25.example.com]:80` will incorrectly match and not be proxied.(CVE-2025-22870)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: golang, openEuler:24.03-LTS-SP1: golang, openEuler:20.03-LTS-SP4: golang, openEuler:22.03-LTS-SP3: golang, openEuler:22.03-LTS-SP4: golang</p> <p>. Security Fix(es):</p> <p>Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to &amp;quot;*.example.com&amp;quot;, a request to &amp;quot;[::1%25.example.com]:80` will incorrectly match and not be proxied.(CVE-2025-22870)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1427 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14855-1 <p>go1.23-1.23.7-1.1 on GA media</p> <p>go1.23-1.23.7-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14855-1 https://cve.radiocsirt.org/vuln/rhsa-2025:14090 <p>rhdh: Red Hat Developer Hub user permissions pbkdf2: pbkdf2 silently returns predictable key material multer: Multer Denial of Service golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware tar-fs: tar-fs has issue where extract can write outside the specified dir with a specific tarball multer: Multer vulnerable to Denial of Service via unhandled exception @node-saml/node-saml: Node-SAML Signature Verification Vulnerability</p> <p>rhdh: Red Hat Developer Hub user permissions pbkdf2: pbkdf2 silently returns predictable key material multer: Multer Denial of Service golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware tar-fs: tar-fs has issue where extract can write outside the specified dir with a specific tarball multer: Multer vulnerable to Denial of Service via unhandled exception @node-saml/node-saml: Node-SAML Signature Verification Vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2025:14090 https://cve.radiocsirt.org/vuln/suse-el-9-client-tools-2026-2254 <p>Security update 5.0.8 for Multi-Linux Manager Client Tools</p> <p>Security update 5.0.8 for Multi-Linux Manager Client Tools</p> https://cve.radiocsirt.org/vuln/suse-el-9-client-tools-2026-2254 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-22870 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.8 and 24 more</p> <p>Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to &#34;*.example.com&#34;, a request to &#34;[::1%25.example.com]:80` will incorrectly match and not be proxied.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.8 and 24 more</p> <p>Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to &#34;*.example.com&#34;, a request to &#34;[::1%25.example.com]:80` will incorrectly match and not be proxied.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-22870 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0485 <p>Ein Angreifer kann eine Schwachstelle in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann eine Schwachstelle in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0485