Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:45:58 +0000 Withdrawn: CLEANSTART-2026-CN27900 — Security fixes for CVE-2025-63811, CVE-2026-1229, CVE-2026-24051, CVE-2026-25680, CVE-2026-25681, CVE-2026-26958, CVE-2… https://cve.radiocsirt.org/vuln/cleanstart-2026-cn27900 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: vault</p> <p>Multiple security vulnerabilities affect the vault package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: vault</p> <p>Multiple security vulnerabilities affect the vault package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-cn27900 EUVD-2026-260724 https://cve.radiocsirt.org/vuln/euvd-2026-260724 EUVD-2026-260724 https://cve.radiocsirt.org/vuln/euvd-2026-260724 fkie_cve-2025-63811 https://cve.radiocsirt.org/vuln/fkie_cve-2025-63811 <p>An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.</p> <p>An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-63811 GHSA-9mj6-hxhv-w67j — jose2go is vulnerable to a JWT bomb attack through its decode function https://cve.radiocsirt.org/vuln/ghsa-9mj6-hxhv-w67j <p><strong>Affected:</strong> Go: github.com/dvsekhvalnov/jose2go</p> <p>An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.</p> <p><strong>Affected:</strong> Go: github.com/dvsekhvalnov/jose2go</p> <p>An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.</p> https://cve.radiocsirt.org/vuln/ghsa-9mj6-hxhv-w67j UBUNTU-CVE-2025-63811 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-63811 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:18.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:20.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:22.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:24.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:25.10: golang-github-dvsekhvalnov-jose2go, Ubuntu:26.04:LTS: golang-github-dvsekhvalnov-jose2go</p> <p>An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:18.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:20.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:22.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:24.04:LTS: golang-github-dvsekhvalnov-jose2go, Ubuntu:25.10: golang-github-dvsekhvalnov-jose2go, Ubuntu:26.04:LTS: golang-github-dvsekhvalnov-jose2go</p> <p>An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-63811