https://radar.offseq.com/threat/httpbody-versions-before-12301-for-perl-drop-mixed-case-percent-escapes-from-urlencoded-form-cve-2026-5b8cb5206b2c0023 2026-10-28T19:29:56.991Z weekly 0.7 https://radar.offseq.com/threat/httpbody-versions-before-12301-for-perl-lose-track-of-chunk-boundaries-in-chunked-request-bodies-cve-3735e1c6103254d8 2026-10-28T19:29:53.784Z weekly 0.7 https://radar.offseq.com/threat/httpbody-versions-before-12401-for-perl-allow-memory-exhaustion-via-unbounded-buffering-of-cve-2026-c9cec32c6766c4f3 2026-10-28T19:29:50.515Z weekly 0.8 https://radar.offseq.com/threat/mimefieldparamval-versions-before-5521-for-perl-do-not-flag-a-duplicate-boundary-parameter-cve-2026-04b86ced7c8e03ec 2026-10-28T19:29:47.870Z weekly 0.7 https://radar.offseq.com/threat/mimewords-versions-before-5521-for-perl-allow-memory-exhaustion-via-repeated-sequences-in-cve-2026-0a3a65e34b050d68 2026-10-28T19:29:44.240Z weekly 0.8 https://radar.offseq.com/threat/httpbody-versions-before-12301-for-perl-allow-cpu-exhaustion-via-quadratic-regex-backtracking-cve-2026-ea37ae73ef02231f 2026-10-28T19:29:40.934Z weekly 0.8 https://radar.offseq.com/threat/httpbody-versions-before-12401-for-perl-allow-cpu-exhaustion-via-regex-backtracking-on-the-cve-2026-032b3334369721d9 2026-10-28T19:29:37.322Z weekly 0.8 https://radar.offseq.com/threat/mimeparserfileunder-versions-before-5521-for-perl-reuse-a-pre-created-output-directory-and-follow-0367d6c059d51790 2026-10-28T19:29:33.927Z weekly 0.8 https://radar.offseq.com/threat/mimeparser-versions-before-5521-for-perl-set-no-limit-on-the-number-of-message-parts-by-default-cve-0bbc857a2f6a75ed 2026-10-28T19:29:30.661Z weekly 0.7 https://radar.offseq.com/threat/when-eap-runs-with-secmgr-the-openjdk-orbs-jdkbridge-honours-attacker-supplied-cdr-codebase-urls-36a8740aa617ecfe 2026-10-28T19:28:55.608Z weekly 0.8 https://radar.offseq.com/threat/dont-starve-together-steam-appid-322330-through-build-747465-contains-a-memory-corruption-8d7ee0f0e5d30ca7 2026-10-28T19:29:27.196Z weekly 0.7 https://radar.offseq.com/threat/a-user-with-read-access-to-grafanas-server-logs-or-to-a-log-store-they-are-shipped-to-can-recover-the-a72cce422e7625d1 2026-10-28T19:29:23.696Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-115415-cwe-1427-improper-neutralization-of-input-used-for-llm-prompting-in-amazon-strands-f79de6bb16a5e324 2026-10-28T19:43:46.375Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118651-cwe-346-origin-validation-error-in-labstack-echo-458a10e78a1689c6 2026-10-28T19:43:41.673Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118650-cwe-177-improper-handling-of-url-encoding-hex-encoding-in-labstack-echo-f71d83b6ef20e803 2026-10-28T19:43:16.875Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-63190-cwe-306-missing-authentication-for-critical-function-in-fearlessgeekmedia-fearlesscms-09d345d566d5dfa9 2026-10-28T19:43:13.154Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-61542-cwe-306-missing-authentication-for-critical-function-in-drhelius-gearboy-a045c1dc8eb4fe53 2026-10-28T19:59:17.028Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118653-cwe-290-authentication-bypass-by-spoofing-in-labstack-echo-e69da52e641e3bd7 2026-10-28T20:00:32.377Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-54162-cwe-150-improper-neutralization-of-escape-meta-or-control-sequences-in-alexandre-c0426a771820dd95 2026-10-28T20:00:28.012Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-61529-cwe-918-server-side-request-forgery-ssrf-in-endatix-fdd45c66e075a621 2026-10-28T20:00:22.689Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118652-cwe-79-cross-site-scripting-in-labstack-echo-b5a9eeeaa5d7a8d3 2026-10-28T20:00:17.834Z weekly 0.7 https://radar.offseq.com/threat/ikev2-use-after-free-bug-when-using-ike-over-tcp-7c9fe8eb142c671f 2026-10-28T20:00:13.556Z weekly 0.7 https://radar.offseq.com/threat/null-pointer-dereference-in-pkcs7-bundle-with-no-certificates-232d595bd1001506 2026-10-28T20:00:08.802Z weekly 0.7 https://radar.offseq.com/threat/vitess-vttablet-twopcz-reflected-xss-856ccc7c2168ad4a 2026-10-28T20:00:04.375Z weekly 0.7 https://radar.offseq.com/threat/tls-12-session-resumption-in-ssl-crosses-sni-virtual-host-client-certificate-trust-boundaries-e459cc77c317bea3 2026-10-28T19:59:59.813Z weekly 0.7 https://radar.offseq.com/threat/tls-13-client-ticket-store-crashed-by-newsessionticket-with-empty-earlydata-extension-in-ssl-2bfef381d5381f8d 2026-10-28T19:59:55.672Z weekly 0.7 https://radar.offseq.com/threat/cifs-utils-mountcifs-credential-file-option-injection-allows-local-privilege-boundary-bypass-b43547d2b8a9c5b2 2026-10-28T19:59:52.375Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-117574-authorization-bypass-through-user-controlled-key-in-red-hat-red-hat-openshift-ai-rhoai-8cd1286cd4e43076 2026-10-28T20:14:53.993Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-118654-cwe-22-path-traversal-in-labstack-echo-c5fae4ae9b6bbf71 2026-10-28T20:15:22.215Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118655-cwe-174-double-decoding-of-the-same-data-in-labstack-echo-8838edf7ded180b5 2026-10-28T20:15:16.581Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-76418-unchecked-return-value-to-null-pointer-dereference-in-cisco-cisco-secure-firewall-e91e1a1647fdbba8 2026-10-28T20:14:47.216Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-55587-cwe-346-origin-validation-error-in-aliasvault-b0a8f547fb6d40e1 2026-10-28T20:14:41.070Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-13451-server-side-request-forgery-ssrf-in-red-hat-red-hat-openshift-ai-rhoai-19614c3f54d2a7d6 2026-10-28T20:14:35.835Z weekly 0.8 https://radar.offseq.com/threat/echo-bodydump-captures-request-and-response-bodies-without-size-limits-in-v4-cve-2026-118260-1803d53c020bf505 2026-10-28T20:14:28.296Z weekly 0.8 https://radar.offseq.com/threat/echo-decompress-permits-unbounded-gzip-expansion-in-v4-cve-2026-118261-e2f8dcd9d2372e68 2026-10-28T20:14:23.009Z weekly 0.8 https://radar.offseq.com/threat/echo-websocket-proxy-can-retain-connections-and-handlers-after-client-disconnect-cve-2026-118262-d5ebb5d5ad83a754 2026-10-28T20:14:18.280Z weekly 0.8 https://radar.offseq.com/threat/echo-bodydump-can-discard-bodylimit-overflow-errors-for-unknown-length-requests-cve-2026-118263-61bc0ee75fe11df7 2026-10-28T20:15:11.988Z weekly 0.7 https://radar.offseq.com/threat/echo-x-real-ip-extractor-trusts-the-header-value-instead-of-the-sending-peer-cve-2026-118265-d43acf2f843fdd4a 2026-10-28T20:15:05.138Z weekly 0.7 https://radar.offseq.com/threat/echo-rejected-websocket-upgrades-can-bypass-echo-route-level-access-controls-cve-2026-118264-4f12241be37a8e3a 2026-10-28T20:14:13.337Z weekly 0.9 https://radar.offseq.com/threat/v2-caddy-has-an-rfc-7230-61-compliance-issue-hop-by-hop-headers-that-leak-through-cve-2026-55458-38b7dc5d8a2a2160 2026-10-28T20:14:59.610Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118656-cwe-601-open-redirect-in-labstack-echo-31d93ea41afc96e5 2026-10-28T20:30:26.218Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118657-cwe-346-origin-validation-error-in-labstack-echo-b92542776a11d39d 2026-10-28T20:30:22.226Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118658-cwe-601-open-redirect-in-labstack-echo-7febe1d2d5177bf4 2026-10-28T20:30:17.219Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118661-cwe-565-reliance-on-cookies-without-validation-and-integrity-checking-in-capricorn86-d5547fd154c5a881 2026-10-28T20:44:33.957Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118659-cwe-918-server-side-request-forgery-ssrf-in-capricorn86-happy-dom-82a36290b5191bf4 2026-10-28T20:43:39.463Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118660-cwe-918-server-side-request-forgery-ssrf-in-capricorn86-happy-dom-3f9c60ed64f7987c 2026-10-28T20:43:35.063Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118667-cwe-22-path-traversal-in-langchain-ai-langgraph-2416abefc2513c6e 2026-10-28T21:00:15.119Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118665-cwe-613-insufficient-session-expiration-in-ardatan-graphql-tools-1ed85b02ea89e405 2026-10-28T20:59:19.269Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118666-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-ardatan-graphql-3e5eb8db875755ba 2026-10-28T21:00:10.440Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118662-cwe-180-incorrect-behavior-order-validate-before-canonicalize-in-vitejs-vite-7cf58801d14b8faa 2026-10-28T21:00:06.892Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118663-cwe-174-double-decoding-of-the-same-data-in-honojs-node-server-b74c4ccfd75b6ac2 2026-10-28T21:00:03.205Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118664-cwe-400-uncontrolled-resource-consumption-in-samverschueren-decode-uri-component-32daeb5d0232e083 2026-10-28T20:59:15.057Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118668-cwe-639-authorization-bypass-through-user-controlled-key-in-langchain-ai-langgraph-api-b1a76c608cfa9eee 2026-10-28T21:06:43.157Z weekly 0.8 https://radar.offseq.com/threat/mysqlconnector-account-password-disclosed-to-a-man-in-the-middle-in-zero-configuration-tls-mode-clear-110a248e1d9fd005 2026-10-28T19:49:44.000Z weekly 0.7 https://radar.offseq.com/threat/rucio-has-an-authorization-bypass-on-rest-api-endpoint-for-signing-urls-cve-2026-58273-09bd098568ade56a 2026-10-28T19:50:05.000Z weekly 0.8 https://radar.offseq.com/threat/mcp-sanitizer-file-path-sanitizer-permits-arbitrary-user-home-absolute-paths-1f04c3c7e2ee970c 2026-10-28T19:51:34.000Z weekly 0.8 https://radar.offseq.com/threat/mcp-sanitizer-url-sanitizer-allows-localhostipv6-loopback-ssrf-bypass-via-explicit-port-or-bracketed-c7db142160cb0742 2026-10-28T19:51:40.000Z weekly 0.8 https://radar.offseq.com/threat/echo-reverse-proxy-forwards-attacker-supplied-x-real-ip-to-upstream-by-default-cve-2026-118651-6cdf5f0b19526173 2026-10-28T19:53:24.000Z weekly 0.7 https://radar.offseq.com/threat/v5-echo-has-csrf-protection-bypass-via-methodoverride-rewriting-post-to-safe-method-cve-2026-118266-32cd2c193e0252bf 2026-10-28T19:53:36.000Z weekly 0.7 https://radar.offseq.com/threat/v5-echo-has-rate-limiter-bypass-via-spoofed-x-forwarded-for-header-in-default-configuration-cve-2026-f41c54201f42dcd6 2026-10-28T19:53:47.000Z weekly 0.7 https://radar.offseq.com/threat/v5-echo-vulnerable-to-reflected-cross-site-scripting-xss-via-unsanitized-jsonp-callback-in-contextjsonp-7617338e77b0d463 2026-10-28T19:54:05.000Z weekly 0.7 https://radar.offseq.com/threat/echos-middlewarestatic-2f-encoded-path-bypasses-routegroup-middleware-guarding-a-statically-served-path-eac4264d1a86a284 2026-10-28T19:54:20.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-core-javascript-url-in-an-xlinkhref-attribute-survives-text-filtering-and-reaches-exported-3d5dca65200e0472 2026-10-28T19:55:10.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-core-html-text-parsing-falls-back-to-unfiltered-innerhtml-during-printing-cve-2026-118244-a4a659f0811779a7 2026-10-28T19:55:23.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-dashboards-proto-data-table-id-writes-sync-listeners-to-objectprototype-cve-2026-118243-033c705ad7c2d940 2026-10-28T19:55:32.000Z weekly 0.7 https://radar.offseq.com/threat/highcharts-dashboards-grid-pro-datatablesetcell-and-column-writers-treat-proto-as-an-cve-2026-118247-dde6a242cedab43f 2026-10-28T19:55:37.000Z weekly 0.7 https://radar.offseq.com/threat/highcharts-dashboards-chartconstructor-is-an-unchecked-lookup-into-the-highcharts-namespace-cve-2026-b3b94e68a5ff5521 2026-10-28T19:55:41.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-grid-custom-icon-definition-objects-written-with-raw-setattribute-on-path-cve-2026-118242-5cfb9192c808c603 2026-10-28T19:55:46.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-grid-pro-cell-renderer-attributes-map-written-with-raw-setattribute-cve-2026-116797-a957edf529650c2d 2026-10-28T19:56:03.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-core-breadcrumbsstyle-keys-become-svg-event-handler-attributes-cve-2026-118246-50c9aec95dbff5bf 2026-10-28T19:56:07.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-series-column-construction-writes-to-objectprototype-cve-2026-118249-b71d74550589237d 2026-10-28T19:56:13.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-dotted-serieskeys-paths-write-to-objectprototype-cve-2026-118250-81b2869a06c8cf78 2026-10-28T19:56:18.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-javascript-url-in-creditshref-runs-script-on-click-cve-2026-118251-8cc21b5190931e4f 2026-10-28T19:56:36.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-dashboards-parses-sidebar-component-labels-as-html-cve-2026-118252-20fba20ceb5fdcf1 2026-10-28T19:56:57.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-dashboards-parses-fullscreen-labels-as-html-cve-2026-118253-5f1ca418bd11c1de 2026-10-28T19:57:20.000Z weekly 0.8 https://radar.offseq.com/threat/grid-lite-highcharts-grid-parses-pagination-language-options-as-html-cve-2026-118254-9e8c8124962a67b8 2026-10-28T19:57:34.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-grid-javascript-url-in-creditshref-runs-script-on-click-cve-2026-118255-0cc4fdaf7210eb0b 2026-10-28T19:57:48.000Z weekly 0.8 https://radar.offseq.com/threat/malicious-code-in-itsa-utils-npm-06c5949afc477309 2026-10-28T21:16:55.345Z weekly 0.7