https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:06:27 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0424 certfr-2026-avi-0424 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0424 https://cve.radiocsirt.org/vuln/euvd-2026-366097 EUVD-2026-366097 https://cve.radiocsirt.org/vuln/euvd-2026-366097 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22029 <p>React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect. There is no impact if Declarative Mode (&lt;BrowserRouter&gt;) is being used. This issue has been patched in @remix-run/router version 1.23.2 and react-router version 7.12.0.</p> <p>React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect. There is no impact if Declarative Mode (&lt;BrowserRouter&gt;) is being used. This issue has been patched in @remix-run/router version 1.23.2 and react-router version 7.12.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-22029 https://cve.radiocsirt.org/vuln/ghsa-2w69-qvjg-hvjx <p><strong>Affected:</strong> npm: react-router, npm: @remix-run/router</p> <p>React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in [Framework Mode](https://reactrouter.com/start/modes#framework), [Data Mode](https://reactrouter.com/start/modes#data), or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if developers are creating redirect paths from untrusted content or via an open redirect.</p> <p>&gt; [!NOTE] &gt; This does not impact applications that use [Declarative Mode](https://reactrouter.com/start/modes#declarative) (`&lt;BrowserRouter&gt;`).</p> <p><strong>Affected:</strong> npm: react-router, npm: @remix-run/router</p> <p>React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in [Framework Mode](https://reactrouter.com/start/modes#framework), [Data Mode](https://reactrouter.com/start/modes#data), or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if developers are creating redirect paths from untrusted content or via an open redirect.</p> <p>&gt; [!NOTE] &gt; This does not impact applications that use [Declarative Mode](https://reactrouter.com/start/modes#declarative) (`&lt;BrowserRouter&gt;`).</p> https://cve.radiocsirt.org/vuln/ghsa-2w69-qvjg-hvjx https://cve.radiocsirt.org/vuln/opensuse-su-2026:10069-1 <p>heroic-games-launcher-2.18.1-2.1 on GA media</p> <p>heroic-games-launcher-2.18.1-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10069-1 https://cve.radiocsirt.org/vuln/rhsa-2026:13542 <p>lodash: prototype pollution in _.unset and _.omit functions golang: archive/tar: Unbounded allocation when parsing GNU sparse map golang: net/url: Memory exhaustion in query parameter parsing in net/url crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption rhacm: Open Cluster Management (OCM): Cross-cluster privilege escalation via improper Kubernetes client certificate renewal validation @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution axios: Axios: Remote Code Execution via Prototype Pollution escalation</p> <p>lodash: prototype pollution in _.unset and _.omit functions golang: archive/tar: Unbounded allocation when parsing GNU sparse map golang: net/url: Memory exhaustion in query parameter parsing in net/url crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption rhacm: Open Cluster Management (OCM): Cross-cluster privilege escalation via improper Kubernetes client certificate renewal validation @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution axios: Axios: Remote Code Execution via Prototype Pollution escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:13542 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0553 <p>Ein Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, und um Dateien zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, und um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0553