https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 03:06:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-13860 cnvd-2018-13860 https://cve.radiocsirt.org/vuln/cnvd-2018-13860 https://cve.radiocsirt.org/vuln/euvd-2026-181587 EUVD-2026-181587 https://cve.radiocsirt.org/vuln/euvd-2026-181587 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16100 <p>dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible.</p> <p>dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16100 https://cve.radiocsirt.org/vuln/ghsa-jcw8-r9xm-32c6 <p><strong>Affected:</strong> npm: dns-sync</p> <p>Affected versions of `dns-sync` have an arbitrary command execution vulnerability in the `resolve()` method.</p> <p>## Recommendation</p> <p>- Use an alternative dns resolver - Do not allow untrusted input into `dns-sync.resolve()`</p> <p><strong>Affected:</strong> npm: dns-sync</p> <p>Affected versions of `dns-sync` have an arbitrary command execution vulnerability in the `resolve()` method.</p> <p>## Recommendation</p> <p>- Use an alternative dns resolver - Do not allow untrusted input into `dns-sync.resolve()`</p> https://cve.radiocsirt.org/vuln/ghsa-jcw8-r9xm-32c6 https://cve.radiocsirt.org/vuln/gsd-2017-16100 gsd-2017-16100 https://cve.radiocsirt.org/vuln/gsd-2017-16100