https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:10:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-375174 EUVD-2026-375174 https://cve.radiocsirt.org/vuln/euvd-2026-375174 https://cve.radiocsirt.org/vuln/fkie_cve-2026-97058 <p>sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.</p> <p>sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-97058 https://cve.radiocsirt.org/vuln/ghsa-hp3w-g68c-fv3c <p>sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.</p> <p>sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.</p> https://cve.radiocsirt.org/vuln/ghsa-hp3w-g68c-fv3c https://cve.radiocsirt.org/vuln/msrc_cve-2026-97058 msrc_CVE-2026-97058 https://cve.radiocsirt.org/vuln/msrc_cve-2026-97058 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-97058 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-sprintf-js, Ubuntu:18.04:LTS: node-sprintf-js, Ubuntu:20.04:LTS: node-sprintf-js, Ubuntu:22.04:LTS: node-sprintf-js, Ubuntu:24.04:LTS: node-sprintf-js, Ubuntu:26.04:LTS: node-sprintf-js</p> <p>sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-sprintf-js, Ubuntu:18.04:LTS: node-sprintf-js, Ubuntu:20.04:LTS: node-sprintf-js, Ubuntu:22.04:LTS: node-sprintf-js, Ubuntu:24.04:LTS: node-sprintf-js, Ubuntu:26.04:LTS: node-sprintf-js</p> <p>sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-97058