https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:31:02 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-277328 EUVD-2026-277328 https://cve.radiocsirt.org/vuln/euvd-2026-277328 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6193 <p>A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod&#39;s terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.</p> <p>A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod&#39;s terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6193 https://cve.radiocsirt.org/vuln/ghsa-wppx-2c2r-43hc <p>A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod&#39;s terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.</p> <p>A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod&#39;s terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.</p> https://cve.radiocsirt.org/vuln/ghsa-wppx-2c2r-43hc https://cve.radiocsirt.org/vuln/rhsa-2026:5807 <p>github.com/containerd/containerd: containerd local privilege escalation trustyai-explainability: command injection via LMEvalJob CR keras: Keras Path Traversal Vulnerability keras: Path Traversal Vulnerability in keras node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications golang: net/url: Memory exhaustion in query parameter parsing in net/url crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate node-forge: node-forge ASN.1 Unbounded Recursion urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion github.com/argoproj/argo-workflows: argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation ajv: ReDoS via $data reference undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression undici: undici: Denial of Service via crafted WebSocket frame with large length undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter Fastify: Fastify: Validation bypass due to malformed Content-Type header leading to integrity impact axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig svgo: SVGO: Denial of Service via XML entity expansion flatted: flatted: Unbounded recursion DoS in parse() revive phase</p> <p>github.com/containerd/containerd: containerd local privilege escalation trustyai-explainability: command injection via LMEvalJob CR keras: Keras Path Traversal Vulnerability keras: Path Traversal Vulnerability in keras node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications golang: net/url: Memory exhaustion in query parameter parsing in net/url crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate node-forge: node-forge ASN.1 Unbounded Recursion urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion github.com/argoproj/argo-workflows: argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation ajv: ReDoS via $data reference undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression undici: undici: Denial of Service via crafted WebSocket frame with large length undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter Fastify: Fastify: Validation bypass due to malformed Content-Type header leading to integrity impact axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig svgo: SVGO: Denial of Service via XML entity expansion flatted: flatted: Unbounded recursion DoS in parse() revive phase</p> https://cve.radiocsirt.org/vuln/rhsa-2026:5807