https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:09:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-14992 bdu:2026-14992 https://cve.radiocsirt.org/vuln/bdu:2026-14992 https://cve.radiocsirt.org/vuln/cleanstart-2026-bp02821 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: rclone</p> <p>Multiple security vulnerabilities affect the rclone package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: rclone</p> <p>Multiple security vulnerabilities affect the rclone package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-bp02821 https://cve.radiocsirt.org/vuln/euvd-2026-323369 EUVD-2026-323369 https://cve.radiocsirt.org/vuln/euvd-2026-323369 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46599 <p>The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.</p> <p>The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-46599 https://cve.radiocsirt.org/vuln/ghsa-q675-qj96-32m9 <p><strong>Affected:</strong> Go: golang.org/x/image</p> <p>The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.</p> <p><strong>Affected:</strong> Go: golang.org/x/image</p> <p>The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.</p> https://cve.radiocsirt.org/vuln/ghsa-q675-qj96-32m9 https://cve.radiocsirt.org/vuln/rhsa-2026:48151 <p>undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy form-data: form-data: Form field override via CRLF injection undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation protobufjs: protobufjs: Denial of Service via crafted sche…</p> <p>undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy form-data: form-data: Form field override via CRLF injection undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation protobufjs: protobufjs: Denial of Service via crafted sche…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:48151 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-46599 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-golang-x-image, Ubuntu:20.04:LTS: golang-golang-x-image, Ubuntu:22.04:LTS: golang-golang-x-image, Ubuntu:24.04:LTS: golang-golang-x-image, Ubuntu:25.10: golang-golang-x-image, Ubuntu:26.04:LTS: golang-golang-x-image</p> <p>The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-golang-x-image, Ubuntu:20.04:LTS: golang-golang-x-image, Ubuntu:22.04:LTS: golang-golang-x-image, Ubuntu:24.04:LTS: golang-golang-x-image, Ubuntu:25.10: golang-golang-x-image, Ubuntu:26.04:LTS: golang-golang-x-image</p> <p>The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-46599