https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:00:42 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0667 certfr-2026-avi-0667 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0667 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad27625 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: mongosh</p> <p>Multiple security vulnerabilities affect the mongosh package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: mongosh</p> <p>Multiple security vulnerabilities affect the mongosh package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ad27625 https://cve.radiocsirt.org/vuln/euvd-2026-370208 EUVD-2026-370208 https://cve.radiocsirt.org/vuln/euvd-2026-370208 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4926 <p>Impact:</p> <p>A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.</p> <p>Patches:</p> <p>Fixed in version 8.4.0.</p> <p>Workarounds:</p> <p>Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.</p> <p>Impact:</p> <p>A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.</p> <p>Patches:</p> <p>Fixed in version 8.4.0.</p> <p>Workarounds:</p> <p>Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4926 https://cve.radiocsirt.org/vuln/ghsa-j3q9-mxjg-w52f <p><strong>Affected:</strong> npm: path-to-regexp</p> <p>### Impact</p> <p>A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.</p> <p>### Patches</p> <p>Fixed in version 8.4.0.</p> <p>### Workarounds</p> <p>Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.</p> <p><strong>Affected:</strong> npm: path-to-regexp</p> <p>### Impact</p> <p>A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.</p> <p>### Patches</p> <p>Fixed in version 8.4.0.</p> <p>### Workarounds</p> <p>Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.</p> https://cve.radiocsirt.org/vuln/ghsa-j3q9-mxjg-w52f https://cve.radiocsirt.org/vuln/rhsa-2026:10153 <p>path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation axios: Axios: Remote Code Execution via Prototype Pollution escalation</p> <p>path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation axios: Axios: Remote Code Execution via Prototype Pollution escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:10153 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4926 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-path-to-regexp, Ubuntu:18.04:LTS: node-path-to-regexp, Ubuntu:20.04:LTS: node-path-to-regexp, Ubuntu:22.04:LTS: node-path-to-regexp, Ubuntu:24.04:LTS: node-path-to-regexp, Ubuntu:25.10: node-path-to-regexp, Ubuntu:26.04:LTS: node-path-to-regexp</p> <p>Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service. Patches: Fixed in version 8.4.0. Workarounds: Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-path-to-regexp, Ubuntu:18.04:LTS: node-path-to-regexp, Ubuntu:20.04:LTS: node-path-to-regexp, Ubuntu:22.04:LTS: node-path-to-regexp, Ubuntu:24.04:LTS: node-path-to-regexp, Ubuntu:25.10: node-path-to-regexp, Ubuntu:26.04:LTS: node-path-to-regexp</p> <p>Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service. Patches: Fixed in version 8.4.0. Workarounds: Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4926 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1407 <p>Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise Certified Container ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise Certified Container ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1407