https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:42:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11028 bdu:2026-11028 https://cve.radiocsirt.org/vuln/bdu:2026-11028 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad69953 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: argo-cd-fips</p> <p>Package argo-cd-fips version 3.1.14-r0 fixes 14 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: argo-cd-fips</p> <p>Package argo-cd-fips version 3.1.14-r0 fixes 14 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ad69953 https://cve.radiocsirt.org/vuln/euvd-2026-278777 EUVD-2026-278777 https://cve.radiocsirt.org/vuln/euvd-2026-278777 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34165 <p>go-git is an extensible git implementation library written in pure Go. From version 5.0.0 to before version 5.17.1, a vulnerability has been identified in which a maliciously crafted .idx file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a denial-of-service (DoS) condition. Exploitation requires write access to the local repository&#39;s .git directory, it order to create or alter existing .idx files. This issue has been patched in version 5.17.1.</p> <p>go-git is an extensible git implementation library written in pure Go. From version 5.0.0 to before version 5.17.1, a vulnerability has been identified in which a maliciously crafted .idx file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a denial-of-service (DoS) condition. Exploitation requires write access to the local repository&#39;s .git directory, it order to create or alter existing .idx files. This issue has been patched in version 5.17.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34165 https://cve.radiocsirt.org/vuln/ghsa-jhf3-xxhw-2wpp <p><strong>Affected:</strong> Go: github.com/go-git/go-git/v5</p> <p>### Impact</p> <p>A vulnerability has been identified in which a maliciously crafted `.idx` file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a Denial of Service (DoS) condition.</p> <p>Exploitation requires write access to the local repository&#39;s `.git` directory, it order to create or alter existing `.idx` files.</p> <p>### Patches</p> <p>Users should upgrade to `v5.17.1`, or the latest `v6` [pseudo-version](https://go.dev/ref/mod#pseudo-versions), in order to mitigate this vulnerability.</p> <p>### Credit</p> <p>The go-git maintainers thank @kq5y for finding and reporting this issue privately to the `go-git` project.</p> <p><strong>Affected:</strong> Go: github.com/go-git/go-git/v5</p> <p>### Impact</p> <p>A vulnerability has been identified in which a maliciously crafted `.idx` file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a Denial of Service (DoS) condition.</p> <p>Exploitation requires write access to the local repository&#39;s `.git` directory, it order to create or alter existing `.idx` files.</p> <p>### Patches</p> <p>Users should upgrade to `v5.17.1`, or the latest `v6` [pseudo-version](https://go.dev/ref/mod#pseudo-versions), in order to mitigate this vulnerability.</p> <p>### Credit</p> <p>The go-git maintainers thank @kq5y for finding and reporting this issue privately to the `go-git` project.</p> https://cve.radiocsirt.org/vuln/ghsa-jhf3-xxhw-2wpp https://cve.radiocsirt.org/vuln/opensuse-su-2026:10509-1 <p>steampipe-2.4.1-1.1 on GA media</p> <p>steampipe-2.4.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10509-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34165 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: golang-github-go-git-go-git, Ubuntu:Pro:24.04:LTS: golang-github-go-git-go-git, Ubuntu:25.10: golang-github-go-git-go-git, Ubuntu:Pro:26.04:LTS: golang-github-go-git-go-git</p> <p>go-git is an extensible git implementation library written in pure Go. From version 5.0.0 to before version 5.17.1, a vulnerability has been identified in which a maliciously crafted .idx file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a denial-of-service (DoS) condition. Exploitation requires write access to the local repository&#39;s .git directory, it order to create or alter existing .idx files. This issue has been patched in version 5.17.1.</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: golang-github-go-git-go-git, Ubuntu:Pro:24.04:LTS: golang-github-go-git-go-git, Ubuntu:25.10: golang-github-go-git-go-git, Ubuntu:Pro:26.04:LTS: golang-github-go-git-go-git</p> <p>go-git is an extensible git implementation library written in pure Go. From version 5.0.0 to before version 5.17.1, a vulnerability has been identified in which a maliciously crafted .idx file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a denial-of-service (DoS) condition. Exploitation requires write access to the local repository&#39;s .git directory, it order to create or alter existing .idx files. This issue has been patched in version 5.17.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34165