https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:31:22 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:3428 <p><strong>Affected:</strong> AlmaLinux:8: aardvark-dns, AlmaLinux:8: buildah, AlmaLinux:8: buildah-tests, AlmaLinux:8: cockpit-podman, AlmaLinux:8: conmon, AlmaLinux:8: container-selinux, AlmaLinux:8: containernetworking-plugins, AlmaLinux:8: containers-common, AlmaLinux:8: crit, AlmaLinux:8: criu and 24 more</p> <p>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.</p> <p>Security Fix(es):</p> <p>* golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload (CVE-2025-65637)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: aardvark-dns, AlmaLinux:8: buildah, AlmaLinux:8: buildah-tests, AlmaLinux:8: cockpit-podman, AlmaLinux:8: conmon, AlmaLinux:8: container-selinux, AlmaLinux:8: containernetworking-plugins, AlmaLinux:8: containers-common, AlmaLinux:8: crit, AlmaLinux:8: criu and 24 more</p> <p>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.</p> <p>Security Fix(es):</p> <p>* golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload (CVE-2025-65637)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:3428 https://cve.radiocsirt.org/vuln/bdu:2026-06592 bdu:2026-06592 https://cve.radiocsirt.org/vuln/bdu:2026-06592 https://cve.radiocsirt.org/vuln/bell-cve-2025-65637 <p><strong>Affected:</strong> Alpaquita:23: skopeo</p> <p><strong>Affected:</strong> Alpaquita:23: skopeo</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-65637 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1082 certfr-2025-avi-1082 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1082 https://cve.radiocsirt.org/vuln/cleanstart-2026-cx82241 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: runc</p> <p>Package runc version 1.1.14-r0 fixes 40 vulnerabilities: ghsa-vvgc-356p-c3xw, CVE-2026-25679, CVE-2025-22873, CVE-2025-22872, CVE-2025-22871...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: runc</p> <p>Package runc version 1.1.14-r0 fixes 40 vulnerabilities: ghsa-vvgc-356p-c3xw, CVE-2026-25679, CVE-2025-22873, CVE-2025-22872, CVE-2025-22871...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-cx82241 https://cve.radiocsirt.org/vuln/euvd-2026-262712 EUVD-2026-262712 https://cve.radiocsirt.org/vuln/euvd-2026-262712 https://cve.radiocsirt.org/vuln/fkie_cve-2025-65637 <p>A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with &#34;token too long&#34; and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions &lt; 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.</p> <p>A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with &#34;token too long&#34; and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions &lt; 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-65637 https://cve.radiocsirt.org/vuln/ghsa-4f99-4q7p-p3gh <p><strong>Affected:</strong> Go: github.com/sirupsen/logrus</p> <p>A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with &#34;token too long&#34; and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions &lt; 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.</p> <p><strong>Affected:</strong> Go: github.com/sirupsen/logrus</p> <p>A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with &#34;token too long&#34; and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions &lt; 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.</p> https://cve.radiocsirt.org/vuln/ghsa-4f99-4q7p-p3gh https://cve.radiocsirt.org/vuln/msrc_cve-2025-65637 msrc_CVE-2025-65637 https://cve.radiocsirt.org/vuln/msrc_cve-2025-65637 https://cve.radiocsirt.org/vuln/oesa-2026-1270 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: runc</p> <p>runc is a CLI tool for spawning and running containers according to the OCI specification. Security Fix(es):</p> <p>A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with &amp;quot;token too long&amp;quot; and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions &amp;lt; 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.(CVE-2025-65637)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: runc</p> <p>runc is a CLI tool for spawning and running containers according to the OCI specification. Security Fix(es):</p> <p>A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with &amp;quot;token too long&amp;quot; and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions &amp;lt; 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.(CVE-2025-65637)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1270 https://cve.radiocsirt.org/vuln/rhsa-2026:0327 <p>github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload</p> <p>github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload</p> https://cve.radiocsirt.org/vuln/rhsa-2026:0327 https://cve.radiocsirt.org/vuln/rhsa-2026:3428 <p>golang: html/template: errors returned from MarshalJSON methods may break template escaping crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload</p> <p>golang: html/template: errors returned from MarshalJSON methods may break template escaping crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload</p> https://cve.radiocsirt.org/vuln/rhsa-2026:3428 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-65637 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: golang-logrus, Ubuntu:18.04:LTS: golang-logrus, Ubuntu:20.04:LTS: golang-logrus, Ubuntu:22.04:LTS: golang-logrus, Ubuntu:24.04:LTS: golang-logrus, Ubuntu:25.10: golang-logrus, Ubuntu:26.04:LTS: golang-logrus</p> <p>A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with &#34;token too long&#34; and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions &lt; 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: golang-logrus, Ubuntu:18.04:LTS: golang-logrus, Ubuntu:20.04:LTS: golang-logrus, Ubuntu:22.04:LTS: golang-logrus, Ubuntu:24.04:LTS: golang-logrus, Ubuntu:25.10: golang-logrus, Ubuntu:26.04:LTS: golang-logrus</p> <p>A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with &#34;token too long&#34; and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions &lt; 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-65637 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0114 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0114