https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:20:27 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0376 certfr-2026-avi-0376 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0376 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4645 <p>Rejected reason: Duplicate of CVE-2026-32287</p> <p>Rejected reason: Duplicate of CVE-2026-32287</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4645 https://cve.radiocsirt.org/vuln/ghsa-x7cq-7pqm-2pgr <p>Rejected reason: Duplicate of CVE-2026-32287</p> <p>Rejected reason: Duplicate of CVE-2026-32287</p> https://cve.radiocsirt.org/vuln/ghsa-x7cq-7pqm-2pgr https://cve.radiocsirt.org/vuln/msrc_cve-2026-4645 msrc_CVE-2026-4645 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4645 https://cve.radiocsirt.org/vuln/rhsa-2026:13548 <p>lodash: prototype pollution in _.unset and _.omit functions golang: archive/tar: Unbounded allocation when parsing GNU sparse map golang: net/url: Memory exhaustion in query parameter parsing in net/url @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue axios: Axios: Remote Code Execution via Prototype Pollution escalation</p> <p>lodash: prototype pollution in _.unset and _.omit functions golang: archive/tar: Unbounded allocation when parsing GNU sparse map golang: net/url: Memory exhaustion in query parameter parsing in net/url @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue axios: Axios: Remote Code Execution via Prototype Pollution escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:13548 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4645 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: golang-github-antchfx-xpath, Ubuntu:22.04:LTS: golang-github-antchfx-xpath, Ubuntu:24.04:LTS: golang-github-antchfx-xpath, Ubuntu:24.04:LTS: golang-golang-x-vuln, Ubuntu:25.10: golang-github-antchfx-xpath, Ubuntu:25.10: golang-golang-x-vuln</p> <p>A flaw was found in the `github.com/antchfx/xpath` component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the `logicalQuery.Select` function, leading to 100% CPU utilization and a Denial of Service (DoS) condition for the affected system.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: golang-github-antchfx-xpath, Ubuntu:22.04:LTS: golang-github-antchfx-xpath, Ubuntu:24.04:LTS: golang-github-antchfx-xpath, Ubuntu:24.04:LTS: golang-golang-x-vuln, Ubuntu:25.10: golang-github-antchfx-xpath, Ubuntu:25.10: golang-golang-x-vuln</p> <p>A flaw was found in the `github.com/antchfx/xpath` component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the `logicalQuery.Select` function, leading to 100% CPU utilization and a Denial of Service (DoS) condition for the affected system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4645