https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:06:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06002 bdu:2024-06002 https://cve.radiocsirt.org/vuln/bdu:2024-06002 https://cve.radiocsirt.org/vuln/euvd-2026-261559 EUVD-2026-261559 https://cve.radiocsirt.org/vuln/euvd-2026-261559 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6535 <p>A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie.</p> <p>A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6535 https://cve.radiocsirt.org/vuln/ghsa-w799-v85j-88pg <p><strong>Affected:</strong> Go: github.com/skupperproject/skupper</p> <p>A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie.</p> <p><strong>Affected:</strong> Go: github.com/skupperproject/skupper</p> <p>A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie.</p> https://cve.radiocsirt.org/vuln/ghsa-w799-v85j-88pg https://cve.radiocsirt.org/vuln/rhsa-2024:4865 <p>python: Path traversal on tempfile.TemporaryDirectory python: The zipfile module is vulnerable to zip-bombs leading to denial of service skupper: potential authentication bypass to skupper console via forged cookies</p> <p>python: Path traversal on tempfile.TemporaryDirectory python: The zipfile module is vulnerable to zip-bombs leading to denial of service skupper: potential authentication bypass to skupper console via forged cookies</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4865