https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:39:39 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:19137 <p><strong>Affected:</strong> AlmaLinux:10: go-fdo-server, AlmaLinux:10: go-fdo-server-manufacturer, AlmaLinux:10: go-fdo-server-owner, AlmaLinux:10: go-fdo-server-rendezvous</p> <p>This package provides a server-side implementation of the FIDO Device Onboard (FDO) specification, written in Go. FDO is an open standard for the late binding of device credentials, allowing for automated and secure on-boarding of devices when they are first powered on in their final location.</p> <p>Security Fix(es):</p> <p>* github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: go-fdo-server, AlmaLinux:10: go-fdo-server-manufacturer, AlmaLinux:10: go-fdo-server-owner, AlmaLinux:10: go-fdo-server-rendezvous</p> <p>This package provides a server-side implementation of the FIDO Device Onboard (FDO) specification, written in Go. FDO is an open standard for the late binding of device credentials, allowing for automated and secure on-boarding of devices when they are first powered on in their final location.</p> <p>Security Fix(es):</p> <p>* github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:19137 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0500 certfr-2026-avi-0500 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0500 https://cve.radiocsirt.org/vuln/cleanstart-2026-aa71310 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: spire-server-fips</p> <p>Package spire-server-fips version 1.14.5-r0 fixes 3 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: spire-server-fips</p> <p>Package spire-server-fips version 1.14.5-r0 fixes 3 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-aa71310 https://cve.radiocsirt.org/vuln/euvd-2026-366771 EUVD-2026-366771 https://cve.radiocsirt.org/vuln/euvd-2026-366771 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33816 <p>Memory-safety vulnerability in github.com/jackc/pgx/v5.</p> <p>Memory-safety vulnerability in github.com/jackc/pgx/v5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33816 https://cve.radiocsirt.org/vuln/ghsa-9jj7-4m8r-rfcm <p><strong>Affected:</strong> Go: github.com/jackc/pgx/v5</p> <p>Memory-safety vulnerability in github.com/jackc/pgx/v5.</p> <p><strong>Affected:</strong> Go: github.com/jackc/pgx/v5</p> <p>Memory-safety vulnerability in github.com/jackc/pgx/v5.</p> https://cve.radiocsirt.org/vuln/ghsa-9jj7-4m8r-rfcm https://cve.radiocsirt.org/vuln/opensuse-su-2026:10754-1 <p>kubectl-cnpg-1.29.1-1.1 on GA media</p> <p>kubectl-cnpg-1.29.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10754-1 https://cve.radiocsirt.org/vuln/rhsa-2026:11070 <p>immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code</p> <p>immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code</p> https://cve.radiocsirt.org/vuln/rhsa-2026:11070 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33816 <p><strong>Affected:</strong> Ubuntu:26.04:LTS: golang-github-jackc-pgx-v5</p> <p>Memory-safety vulnerability in github.com/jackc/pgx/v5.</p> <p><strong>Affected:</strong> Ubuntu:26.04:LTS: golang-github-jackc-pgx-v5</p> <p>Memory-safety vulnerability in github.com/jackc/pgx/v5.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33816 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3046 <p>Ein Angreifer kann mehrere Schwachstellen in IBM Concert ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM Concert ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3046