https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:02:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-335606 EUVD-2026-335606 https://cve.radiocsirt.org/vuln/euvd-2026-335606 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44918 <p>OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.</p> <p>OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44918 https://cve.radiocsirt.org/vuln/ghsa-q458-5jc4-vvpg <p>OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.</p> <p>OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.</p> https://cve.radiocsirt.org/vuln/ghsa-q458-5jc4-vvpg https://cve.radiocsirt.org/vuln/rhsa-2026:51038 <p>webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate ironic-python-agent: OpenStack ironic-python-agent: Arbitrary code execution via malicious image openstack-ironic: Prevent rehoming resources to nodes with different owner golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on WSGI/PHP upstreams</p> <p>webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate ironic-python-agent: OpenStack ironic-python-agent: Arbitrary code execution via malicious image openstack-ironic: Prevent rehoming resources to nodes with different owner golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on WSGI/PHP upstreams</p> https://cve.radiocsirt.org/vuln/rhsa-2026:51038 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44918 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ironic, Ubuntu:18.04:LTS: ironic, Ubuntu:20.04:LTS: ironic, Ubuntu:22.04:LTS: ironic, Ubuntu:24.04:LTS: ironic, Ubuntu:25.10: ironic, Ubuntu:26.04:LTS: ironic</p> <p>OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ironic, Ubuntu:18.04:LTS: ironic, Ubuntu:20.04:LTS: ironic, Ubuntu:22.04:LTS: ironic, Ubuntu:24.04:LTS: ironic, Ubuntu:25.10: ironic, Ubuntu:26.04:LTS: ironic</p> <p>OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44918