https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:39:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-04782 bdu:2026-04782 https://cve.radiocsirt.org/vuln/bdu:2026-04782 https://cve.radiocsirt.org/vuln/bell-cve-2026-32285 <p><strong>Affected:</strong> Alpaquita:25: cri-tools, Alpaquita:stream: cri-tools</p> <p><strong>Affected:</strong> Alpaquita:25: cri-tools, Alpaquita:stream: cri-tools</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-32285 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0540 certfr-2026-avi-0540 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0540 https://cve.radiocsirt.org/vuln/cleanstart-2026-ap92343 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: tempo-fips</p> <p>Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: tempo-fips</p> <p>Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ap92343 https://cve.radiocsirt.org/vuln/euvd-2026-365509 EUVD-2026-365509 https://cve.radiocsirt.org/vuln/euvd-2026-365509 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32285 <p>The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.</p> <p>The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-32285 https://cve.radiocsirt.org/vuln/ghsa-6g7g-w4f8-9c9x <p><strong>Affected:</strong> Go: github.com/buger/jsonparser</p> <p>The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.</p> <p><strong>Affected:</strong> Go: github.com/buger/jsonparser</p> <p>The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.</p> https://cve.radiocsirt.org/vuln/ghsa-6g7g-w4f8-9c9x https://cve.radiocsirt.org/vuln/opensuse-su-2026:10731-1 <p>mcphost-0.34.0-1.1 on GA media</p> <p>mcphost-0.34.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10731-1 https://cve.radiocsirt.org/vuln/rhsa-2026:13548 <p>lodash: prototype pollution in _.unset and _.omit functions golang: archive/tar: Unbounded allocation when parsing GNU sparse map golang: net/url: Memory exhaustion in query parameter parsing in net/url @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue axios: Axios: Remote Code Execution via Prototype Pollution escalation</p> <p>lodash: prototype pollution in _.unset and _.omit functions golang: archive/tar: Unbounded allocation when parsing GNU sparse map golang: net/url: Memory exhaustion in query parameter parsing in net/url @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue axios: Axios: Remote Code Execution via Prototype Pollution escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:13548 https://cve.radiocsirt.org/vuln/suse-su-2026:21756-1 <p>Security update for mcphost</p> <p>Security update for mcphost</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21756-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32285 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-buger-jsonparser, Ubuntu:20.04:LTS: golang-github-buger-jsonparser, Ubuntu:22.04:LTS: golang-github-buger-jsonparser, Ubuntu:24.04:LTS: golang-github-buger-jsonparser, Ubuntu:25.10: golang-github-buger-jsonparser, Ubuntu:26.04:LTS: golang-github-buger-jsonparser</p> <p>The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-buger-jsonparser, Ubuntu:20.04:LTS: golang-github-buger-jsonparser, Ubuntu:22.04:LTS: golang-github-buger-jsonparser, Ubuntu:24.04:LTS: golang-github-buger-jsonparser, Ubuntu:25.10: golang-github-buger-jsonparser, Ubuntu:26.04:LTS: golang-github-buger-jsonparser</p> <p>The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32285 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1226 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Hardened Images RPMs ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen und möglicherweise Daten zu manipulieren oder Path-Traversal-Angriffe durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Hardened Images RPMs ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen und möglicherweise Daten zu manipulieren oder Path-Traversal-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1226