<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 05:20:37 +0000</lastBuildDate>
    <item>
      <title>certfr-2026-avi-0888 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2026-avi-0888</link>
      <description>certfr-2026-avi-0888</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2026-avi-0888</guid>
    </item>
    <item>
      <title>Withdrawn: CLEANSTART-2026-AP92343 — Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32287, CVE-…</title>
      <link>https://cve.radiocsirt.org/vuln/cleanstart-2026-ap92343</link>
      <description>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; CleanStart: tempo-fips&lt;/p&gt;
&lt;p&gt;Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; CleanStart: tempo-fips&lt;/p&gt;
&lt;p&gt;Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cleanstart-2026-ap92343</guid>
    </item>
    <item>
      <title>EUVD-2026-278108</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-278108</link>
      <description>EUVD-2026-278108</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-278108</guid>
    </item>
    <item>
      <title>fkie_cve-2026-32287</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2026-32287</link>
      <description>&lt;p&gt;Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as &amp;#34;1=1&amp;#34; or &amp;#34;true()&amp;#34;.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as &amp;#34;1=1&amp;#34; or &amp;#34;true()&amp;#34;.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2026-32287</guid>
    </item>
    <item>
      <title>GHSA-65xw-vw82-r86x — XPath: Boolean expression infinite loop leads to denial of service via CPU exhaustion</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-65xw-vw82-r86x</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Go: github.com/antchfx/xpath&lt;/p&gt;
&lt;p&gt;Boolean expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as &amp;#34;1=1&amp;#34; or &amp;#34;true()&amp;#34;.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Go: github.com/antchfx/xpath&lt;/p&gt;
&lt;p&gt;Boolean expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as &amp;#34;1=1&amp;#34; or &amp;#34;true()&amp;#34;.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-65xw-vw82-r86x</guid>
    </item>
    <item>
      <title>msrc_CVE-2026-32287 — Infinite loop in github.com/antchfx/xpath</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-32287</link>
      <description>msrc_CVE-2026-32287</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-32287</guid>
    </item>
    <item>
      <title>RHSA-2026:9388 — Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.2 release</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2026:9388</link>
      <description>&lt;p&gt;github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2026:9388</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2026-32287</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32287</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:20.04:LTS: golang-github-antchfx-xpath, Ubuntu:22.04:LTS: golang-github-antchfx-xpath, Ubuntu:24.04:LTS: golang-github-antchfx-xpath, Ubuntu:25.10: golang-github-antchfx-xpath, Ubuntu:26.04:LTS: golang-github-antchfx-xpath&lt;/p&gt;
&lt;p&gt;Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as &amp;#34;1=1&amp;#34; or &amp;#34;true()&amp;#34;.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:20.04:LTS: golang-github-antchfx-xpath, Ubuntu:22.04:LTS: golang-github-antchfx-xpath, Ubuntu:24.04:LTS: golang-github-antchfx-xpath, Ubuntu:25.10: golang-github-antchfx-xpath, Ubuntu:26.04:LTS: golang-github-antchfx-xpath&lt;/p&gt;
&lt;p&gt;Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as &amp;#34;1=1&amp;#34; or &amp;#34;true()&amp;#34;.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32287</guid>
    </item>
  </channel>
</rss>
