https://radar.offseq.com/threat/vulnerability-in-drupal-cacheflush-cve-2026-118563-577461bf6a610b5c 2026-10-30T07:16:27.906Z weekly 0.7 https://radar.offseq.com/threat/vulnerability-in-drupal-payumoney-for-drupal-commerce-cve-2026-118564-597cd34fcb3be63c 2026-10-30T07:16:25.738Z weekly 0.7 https://radar.offseq.com/threat/improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-8dfb4afff2d90086 2026-10-30T07:16:23.236Z weekly 0.8 https://radar.offseq.com/threat/external-control-of-file-name-or-path-vulnerability-in-drupal-single-content-sync-allows-path-cve-2026-e42247a81b10c0dd 2026-10-30T07:16:20.288Z weekly 0.8 https://radar.offseq.com/threat/improper-verification-of-cryptographic-signature-vulnerability-in-drupal-commerce-stripe-allows-cve-cb7f827d3efc749f 2026-10-30T07:15:41.587Z weekly 0.8 https://radar.offseq.com/threat/incorrect-authorization-vulnerability-in-drupal-fasttoggle-allows-forceful-browsing-cve-2026-118569-75d38bc9c4b7a1bb 2026-10-30T07:15:38.820Z weekly 0.8 https://radar.offseq.com/threat/use-of-web-browser-cache-containing-sensitive-information-vulnerability-in-drupal-media-alias-display-a0db43a3d7321e35 2026-10-30T07:15:35.992Z weekly 0.7 https://radar.offseq.com/threat/cross-site-request-forgery-csrf-vulnerability-in-drupal-fasttoggle-allows-cross-site-request-forgery-ffa040266f26b6d1 2026-10-30T07:15:31.527Z weekly 0.7 https://radar.offseq.com/threat/insecure-storage-of-sensitive-information-vulnerability-in-drupal-content-sync-content-syncio-cve-2026-f971371a56d43d77 2026-10-30T07:15:28.341Z weekly 0.8 https://radar.offseq.com/threat/authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-oauth-login-oauth-cve-b985b6c343ec218b 2026-10-30T07:15:25.512Z weekly 0.8 https://radar.offseq.com/threat/missing-authorization-vulnerability-in-drupal-oauth2-token-manager-allows-forceful-browsing-cve-2026-436d0c2ab1d49826 2026-10-30T07:15:21.413Z weekly 0.7 https://radar.offseq.com/threat/the-export-and-import-users-and-customers-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-a6b84682192add8b 2026-10-30T07:01:05.376Z weekly 0.8 https://radar.offseq.com/threat/authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-captcha-allows-cve-41c327aa1ec3ef15 2026-10-30T07:15:18.314Z weekly 0.8 https://radar.offseq.com/threat/improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-cve-a45ac314efd44476 2026-10-30T07:15:15.090Z weekly 0.8 https://radar.offseq.com/threat/incorrect-authorization-vulnerability-in-drupal-field-permissions-allows-forceful-browsing-cve-2026-6289de8778e4d048 2026-10-30T07:15:11.986Z weekly 0.8 https://radar.offseq.com/threat/missing-authorization-vulnerability-in-drupal-xray-audit-allows-forceful-browsing-cve-2026-96389-387a41d35c18e3eb 2026-10-30T07:15:09.366Z weekly 0.8 https://radar.offseq.com/threat/improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-6d808c03449f7473 2026-10-30T07:15:04.822Z weekly 0.8 https://radar.offseq.com/threat/incorrect-permission-assignment-for-critical-resource-vulnerability-in-drupal-s3-file-system-allows-d60ae907cec85cf9 2026-10-30T07:15:01.209Z weekly 0.7 https://radar.offseq.com/threat/incorrect-authorization-vulnerability-in-drupal-field-permissions-allows-forceful-browsing-cve-2026-01e35305dfe3b79e 2026-10-30T07:14:58.590Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-glib-networking-cve-2026-103963-4c49e0d6aa08b70e 2026-10-30T07:01:01.908Z weekly 0.8 https://radar.offseq.com/threat/the-page-and-post-restriction-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-in-all-8ff8e54c7fcca92e 2026-10-30T07:14:55.801Z weekly 0.7 https://radar.offseq.com/threat/the-firelight-lightbox-wordpress-plugin-before-2323-does-not-escape-the-url-of-links-it-opens-in-its-688714429d2ee034 2026-10-30T07:14:50.938Z weekly 0.8 https://radar.offseq.com/threat/the-events-made-easy-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-width-5db82eed49460563 2026-10-30T07:14:47.948Z weekly 0.7 https://radar.offseq.com/threat/the-enable-media-replace-wordpress-plugin-before-423-does-not-restrict-the-classes-allowed-when-fdacc9d9a9ac3d5c 2026-10-30T07:02:25.605Z weekly 0.8 https://radar.offseq.com/threat/the-user-frontend-wordpress-plugin-before-4314-does-not-sanitise-and-escape-some-user-supplied-values-e34741af24582b1c 2026-10-30T07:02:22.147Z weekly 0.7 https://radar.offseq.com/threat/the-content-egg-plugin-for-wordpress-is-vulnerable-to-unauthorized-modification-of-data-due-to-a-54776dc4903e0d8e 2026-10-30T07:02:18.967Z weekly 0.7 https://radar.offseq.com/threat/the-cool-formkit-lite-advanced-form-builder-for-elementor-plugin-for-wordpress-is-vulnerable-to-stored-22ffa9649d4b41cb 2026-10-30T07:02:15.457Z weekly 0.7 https://radar.offseq.com/threat/the-buddyforms-wordpress-plugin-before-2103-does-not-check-that-the-requester-is-allowed-to-manage-a-d2dae6865929e842 2026-10-30T07:02:12.136Z weekly 0.8 https://radar.offseq.com/threat/the-security-plugin-firewall-malware-scanner-with-auto-removal-wordpress-plugin-before-2191-does-not-953a07ac2bedcd98 2026-10-30T07:02:09.304Z weekly 0.8 https://radar.offseq.com/threat/the-joinchat-wordpress-plugin-before-642-does-not-escape-the-message-of-its-button-block-before-5b23c82d784ff6db 2026-10-30T07:02:05.953Z weekly 0.8 https://radar.offseq.com/threat/the-wp-visitor-statistics-real-time-traffic-wordpress-plugin-before-88-does-not-sanitize-and-escape-5a1687a1e4a37740 2026-10-30T07:02:03.025Z weekly 0.8 https://radar.offseq.com/threat/the-security-plugin-firewall-malware-scanner-with-auto-removal-wordpress-plugin-before-2191-does-not-2b4630aa4f5ca953 2026-10-30T07:02:00.070Z weekly 0.8 https://radar.offseq.com/threat/the-joomsport-for-sports-team-league-football-hockey-more-plugin-for-wordpress-is-vulnerable-to-bef039bcbb15920f 2026-10-30T07:01:56.049Z weekly 0.7 https://radar.offseq.com/threat/the-buddyforms-wordpress-plugin-before-2101-does-not-verify-that-a-user-editing-an-existing-entry-is-a432f0dc486a68b3 2026-10-30T07:01:52.748Z weekly 0.8 https://radar.offseq.com/threat/the-fraud-prevention-for-woocommerce-and-edd-wordpress-plugin-before-236-does-not-check-that-a-user-is-664410404b95ce4c 2026-10-30T07:01:49.899Z weekly 0.7 https://radar.offseq.com/threat/the-content-egg-affiliate-product-importer-price-comparison-plugin-for-wordpress-is-vulnerable-to-e44b0d145bd62516 2026-10-30T07:01:47.231Z weekly 0.7 https://radar.offseq.com/threat/the-forminator-forms-plugin-for-wordpress-is-vulnerable-to-limited-file-deletion-in-all-versions-up-4f4b0f14396da454 2026-10-30T07:01:43.384Z weekly 0.7 https://radar.offseq.com/threat/the-wp-visitor-statistics-real-time-traffic-wordpress-plugin-before-88-does-not-sanitize-and-escape-a-d7fdfbc7c7613095 2026-10-30T07:01:39.952Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-114690-out-of-bounds-write-in-red-hat-red-hat-enterprise-linux-10-63d8c63608a98e3a 2026-10-30T12:08:30.974Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-114691-integer-overflow-or-wraparound-in-red-hat-red-hat-enterprise-linux-10-5d14e7006ddb6a27 2026-10-30T12:08:35.292Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-115455-out-of-bounds-write-in-red-hat-red-hat-enterprise-linux-10-aa4ddaa3c225e97a 2026-10-30T12:08:39.784Z weekly 0.7 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-3ded9310ef0a4c05 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/apm-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-lines-934ce1b909f689cb 2026-10-29T21:30:32.000Z weekly 0.8 https://radar.offseq.com/threat/apm-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-71b16877642c037b 2026-10-29T21:30:32.000Z weekly 0.8 https://radar.offseq.com/threat/apm-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-ab98ac666cc53dee 2026-10-29T21:30:32.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-bd2b5d3b2ee04eda 2026-10-29T21:30:32.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-8db699ead7281820 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-54541f55d3af5918 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-evicts-a-fresh-lock-file-whose-watched-age-another-local-users-pre-dated-file-31a02f50cd345c17 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-4e8a5dde1094fb82 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-ecb9c1de71d9987e 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-47a043f5c7aff462 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-6aed714b2b608ae7 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-break-restore-follows-a-swapped-in-symbolic-link-and-hard-links-a-file-of-2c344bc58ee91dbc 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-f5ddbfa249a61b39 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-564366b3592a2a45 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-c4976167a78b4ed6 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-873957bb67d13d6c 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-the-hard-link-route-deletes-any-directory-another-user-renames-onto-its-2b9550c0023fca90 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-5ef5bc841c9a164b 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-147fc252396a3e9b 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-6c2c51c0029979a4 2026-10-29T21:30:32.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-f5726c6f40c33214 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-9476fc3a9c21560c 2026-10-29T21:30:32.000Z weekly 0.7 https://radar.offseq.com/threat/mistune-path-traversal-and-xss-in-include-directive-cve-2026-115355-b498f0875e01c30f 2026-10-29T21:30:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-f1c3f4d99c1b0839 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-5f780e0fb9bb0f24 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-5fe3ce60fe71b117 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-913825e842bdecc0 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-7860d51a5b673410 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-36277760e83466b3 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-2ae6cca2e3cd6e0a 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-fa7c3529a41eccfb 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-3a2833d53032af75 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-8eb91bcbb7034a79 2026-10-29T21:30:57.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-builtin-creation-follows-linked-environment-directories-cve-2026-113716-1c732592ed04e847 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-files-can-follow-existing-destination-links-cve-2026-113721-457c667534adfdd1 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-posix-console-launchers-interpret-destination-paths-as-shell-syntax-cve-2026-83ddd7bd5607c7d2 2026-10-29T21:30:57.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-prompt-values-can-change-meaning-under-older-compatibility-modes-cve-2026-113723-38676ca9716d4191 2026-10-29T21:30:57.000Z weekly 0.8 https://radar.offseq.com/threat/charm-tools-virtualenv-bash-activate-runs-commands-from-an-environment-name-with-a-backslash-before-0881e5c7137c6d98 2026-10-29T21:30:57.000Z weekly 0.8 https://radar.offseq.com/threat/charm-tools-virtualenv-activate-runs-commands-from-the-environment-name-in-zsh-with-promptsubst-cve-72b2cc2118cf83f8 2026-10-29T21:30:57.000Z weekly 0.8 https://radar.offseq.com/threat/charm-tools-virtualenv-activatefish-runs-commands-from-a-path-or-prompt-with-a-backslash-before-a-quote-c8961cc7f7b5cd38 2026-10-29T21:30:57.000Z weekly 0.8 https://radar.offseq.com/threat/charm-tools-virtualenv-activation-scripts-run-code-from-a-path-that-contains-a-placeholder-name-cve-1abba204dc0f3306 2026-10-29T21:30:57.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-32a306b92a9f3100 2026-10-29T21:30:57.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-is-vulnerable-to-directory-traversal-cve-2024-23334-f1c584e6f5d5f34d 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttps-http-parser-the-python-one-not-llhttp-still-overly-lenient-about-separators-cve-2024-33b4151a0014dc65 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-cross-site-scripting-vulnerability-on-index-pages-for-static-file-handling-cve-2024-5ab620385f6d009b 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-vulnerable-to-denial-of-service-when-trying-to-parse-malformed-post-requests-cve-2024-86ce8e85e7ee9f16 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-in-aiohttp-compressed-files-as-symlinks-are-not-protected-from-path-traversal-cve-2024-42367-9a02217fdc42c8e8 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-has-a-memory-leak-when-middleware-is-enabled-when-requesting-a-resource-with-a-non-c91aa8b04e2def6f 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-aiohttp-allows-request-smuggling-due-to-incorrect-parsing-of-chunk-extensions-cve-2024-52304-9ffad53a6d4204e3 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-is-vulnerable-to-http-requestresponse-smuggling-through-incorrect-parsing-of-chunked-f20b7c3ed8124cb0 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttps-http-parser-autodecompress-feature-is-vulnerable-to-zip-bomb-cve-2025-69223-e7f6ede0f83c5fb4 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-aiohttps-unicode-processing-of-header-values-could-cause-parsing-discrepancies-cve-2025-69224-2936083129168ebe 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-has-unicode-match-groups-in-regexes-for-ascii-protocol-elements-cve-2025-69225-d7dca7e62e19fc18 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-vulnerable-to-brute-force-leak-of-internal-static-le-path-components-cve-2025-69226-349a84cee7d2d0c8 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-vulnerable-to-dos-when-bypassing-asserts-cve-2025-69227-ec0844442566207a 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-aiohttp-vulnerable-to-denial-of-service-through-large-payloads-cve-2025-69228-6772ab82ce6784ca 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-aiohttp-vulnerable-to-dos-through-chunked-messages-cve-2025-69229-781c0798a060f073 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-aiohttp-vulnerable-to-cookie-parser-warning-storm-cve-2025-69230-22277bac825ad4c0 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-8b163c1d609b556c 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-server-lacks-an-initial-requestheader-timeout-cve-2026-111064-4525055fad062ec0 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-connector-pool-exhaustion-via-max-age-overflow-cve-2026-111065-a938e9845ff618c0 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-file-descriptor-exhaustion-in-multipart-requests-cve-2026-111066-b38cd9b8ea69c248 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-absolute-form-request-targets-can-spoof-requestscheme-cve-2026-111748-278c3c2c1917a44c 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-cookie-from-subdomain-can-remove-host-only-scope-from-existing-cookies-cve-2026-111749-9c45080b105f86cb 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-pure-python-parser-request-smuggling-cve-2026-111750-8f5ce4b3c23d3c3f 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-allows-unlimited-trailer-headers-leading-to-possible-uncapped-memory-usage-cve-2026-d38e383ee612d38b 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-affected-by-denial-of-service-dos-via-unbounded-dns-cache-in-tcpconnector-cve-2026-8a28587ed469df0a 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-has-crlf-injection-through-multipart-part-content-type-header-construction-cve-2026-42e23f6ac7c8b42a 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-affected-by-unc-ssrfntlmv2-credential-theftlocal-file-read-in-static-resource-handler-3ca858e291936402 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-aiohttp-has-a-multipart-header-size-bypass-cve-2026-34516-15c557b3bee70f7b 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-aiohttp-has-late-size-enforcement-for-non-file-multipart-fields-causes-memory-dos-cve-2026-34e4e5c8eb7795be 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-leaks-cookie-and-proxy-authorization-headers-on-cross-origin-redirect-cve-2026-34518-950c039fedebbb1f 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-has-http-response-splitting-via-r-in-reason-phrase-cve-2026-34519-a726cb9562924eb9 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttps-c-parser-llhttp-accepts-null-bytes-and-control-characters-in-response-header-values-25ff542429f44535 2026-10-29T21:31:24.000Z weekly 0.9 https://radar.offseq.com/threat/ansible-aiohttp-accepts-duplicate-host-headers-cve-2026-34525-6ca97d3b07e559eb 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-is-vulnerable-to-deserialization-of-untrusted-data-cve-2026-34993-590c38fd4f9078f7 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-aiohttp-is-vulnerable-to-cross-origin-redirect-with-per-request-cookies-cve-2026-47265-90e6b7e8f3831064 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-crlf-injection-in-multipart-headers-cve-2026-50269-7dd86f5344e3bfde 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-http1-pipelined-requests-queue-without-limit-cve-2026-54273-692f12cd8061b068 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-incomplete-websocket-frame-payloads-bypass-memory-limits-cve-2026-54274-30a92d11b87810b7 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-tls-server-hostname-override-is-ignored-when-reusing-https-connections-cve-2026-54275-919280f23fe1357c 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-digestauthmiddleware-applies-credentials-to-cross-origin-redirect-challenges-cve-2026-54276-5968a34ac0dce4eb 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-c-http-parser-bypasses-maxlinesize-for-fragmented-lines-cve-2026-54277-566d7cae1377ddca 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-unread-compressed-request-bodies-bypass-clientmaxsize-during-cleanup-cve-2026-54278-111b431e4fff66b7 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-host-only-cookies-become-domain-cookies-after-cookiejar-persistence-cve-2026-54279-5629eda873bb0662 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-payload-response-resources-are-not-closed-after-mid-body-disconnect-cve-2026-54280-32f856257e44879a 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-websocket-client-accepts-compressed-frames-without-negotiated-permessage-deflate-cve-2026-59881-237f4ea7e24bcebc 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-http-request-smuggling-via-websocket-upgrade-cve-2026-69243-9d90c7485545cb6b 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-out-of-bounds-heap-read-in-c-http-response-parser-error-path-malformed-chunked-response-cve-04fbd40cf4e51044 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-multiple-instances-of-excessive-or-unbounded-memorycpu-use-d87917d0ceea8da1 2026-10-29T21:31:24.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-aiohttp-has-vulnerable-dependency-that-is-vulnerable-to-request-smuggling-4d9ab72da14c4fe5 2026-10-29T21:31:24.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-evicts-a-fresh-lock-file-whose-watched-age-another-local-users-pre-dated-file-a07221bb2e7081e0 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-d137faf1db137b4f 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-081cb9ece1cce07d 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-6cffdc78631e7246 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-1c41ac0a9156ca92 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-break-restore-follows-a-swapped-in-symbolic-link-and-hard-links-a-file-of-04f67c4b097deb90 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-bf3e8659d40713b7 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-e55937fc08ec07f7 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-0288a0ddc1106abf 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-447b9fc4e138c3a5 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-the-hard-link-route-deletes-any-directory-another-user-renames-onto-its-ce5b72783094b9d6 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-ad883dc66c135191 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-0f525ddce05a571c 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-7300ae717b1c4735 2026-10-29T21:31:26.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-8c36318b74f87f7c 2026-10-29T21:31:26.000Z weekly 0.7 https://radar.offseq.com/threat/aws-cdk-cli-prints-aws-credentials-retrieved-by-custom-credential-plugins-cve-2025-2598-f3df989f83c5d7a2 2026-10-29T21:31:34.000Z weekly 0.7 https://radar.offseq.com/threat/cloudflare-wrangler-wrangler-affected-by-os-command-injection-in-wrangler-pages-deploy-cve-2026-0933-8fd87dae8c0a7d33 2026-10-29T21:31:36.000Z weekly 0.8 https://radar.offseq.com/threat/bazarr-setuptools-has-a-path-traversal-vulnerability-in-packageindexdownload-that-leads-to-arbitrary-1ad3eae3b6a9ea99 2026-10-29T21:31:41.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-122d53f5952837f7 2026-10-29T21:31:41.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-d70ec1f8841aab31 2026-10-29T21:31:41.000Z weekly 0.7 https://radar.offseq.com/threat/bilix-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-39b1475bc629b3e1 2026-10-29T21:31:41.000Z weekly 0.9 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-313b6dfb92ff2a09 2026-10-29T21:32:00.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-eefef0fd28e1f840 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/cycode-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-lines-5e8199e488c2b26c 2026-10-29T21:32:08.000Z weekly 0.8 https://radar.offseq.com/threat/cycode-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-60b2e7928e2bae81 2026-10-29T21:32:08.000Z weekly 0.8 https://radar.offseq.com/threat/cycode-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-f18ea54f20c0dbce 2026-10-29T21:32:08.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-6c414598e7c064f8 2026-10-29T21:32:08.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-d34bacd98e70c50c 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-7f151e71738c92c4 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-126dc2f3cb6342c1 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-6872314aca186694 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-2ca5ad98954af582 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-d8ea2f02514379da 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-c330e9307a5c86d1 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-71b605038824d9d6 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-ffcf1e57540e8c1f 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-101f042182d6566b 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-5f36bd3712329a58 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-32f1b8db6b0833ae 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-07895578cb639ae9 2026-10-29T21:32:08.000Z weekly 0.7 https://radar.offseq.com/threat/check-jsonschema-default-caching-for-remote-schemas-allows-for-cache-confusion-cve-2024-53848-9e530dd4ddfbc1b2 2026-10-29T21:32:13.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-df0c033e7dc6ce46 2026-10-29T21:32:34.000Z weekly 0.7 https://radar.offseq.com/threat/cf2tf-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-lines-48718f82f29477ad 2026-10-29T21:32:34.000Z weekly 0.8 https://radar.offseq.com/threat/cf2tf-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-c54f196380bd23d2 2026-10-29T21:32:34.000Z weekly 0.8 https://radar.offseq.com/threat/cf2tf-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-b4876babeb2e37a5 2026-10-29T21:32:34.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-4cbfc6b4ba8e7f51 2026-10-29T21:32:34.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-ec8db038591b94eb 2026-10-29T21:32:34.000Z weekly 0.7 https://radar.offseq.com/threat/esphome-remote-code-execution-via-arbitrary-file-write-cve-2024-27081-9a94c73d639cd7c8 2026-10-29T21:32:37.000Z weekly 0.8 https://radar.offseq.com/threat/esphome-vulnerable-to-stored-cross-site-scripting-in-edit-configuration-file-api-cve-2024-27287-f1025d9d2fc18ec8 2026-10-29T21:32:37.000Z weekly 0.7 https://radar.offseq.com/threat/esphome-vulnerable-to-authentication-bypass-via-cross-site-request-forgery-cve-2024-29019-dfeae64a97d134f7 2026-10-29T21:32:37.000Z weekly 0.8 https://radar.offseq.com/threat/esphome-esp-idf-webserver-basic-auth-bypass-using-empty-or-incomplete-authorization-header-cve-2025-5d90d96703c511b4 2026-10-29T21:32:37.000Z weekly 0.8 https://radar.offseq.com/threat/esphome-vulnerable-to-denial-of-service-via-out-of-bounds-check-bypass-in-the-api-component-cve-2026-ff191596d283e65d 2026-10-29T21:32:37.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-a-stored-cross-site-scripting-xss-vulnerability-exists-in-netbox-410-within-the-configuration-3a878c22300b7eee 2026-10-29T21:32:40.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-setuptools-vulnerable-to-command-injection-via-package-url-cve-2024-6345-5affebd4e59d763a 2026-10-29T21:32:40.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-setuptools-has-a-path-traversal-vulnerability-in-packageindexdownload-that-leads-to-arbitrary-58682f94468b3160 2026-10-29T21:32:40.000Z weekly 0.8 https://radar.offseq.com/threat/multidict-reference-leak-in-cimultidictmultidict-items-view-union-and-subtraction-cve-2026-104874-6a1992036472d100 2026-10-29T21:32:40.000Z weekly 0.7 https://radar.offseq.com/threat/ansible-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-fa6eee08e94d0a65 2026-10-29T21:32:40.000Z weekly 0.8 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-bb414aa2fac6c198 2026-10-29T21:32:40.000Z weekly 0.8 https://radar.offseq.com/threat/ansible-paramiko-rsakeypy-allows-the-sha-1-algorithm-cve-2026-44405-f11035dfae0ce3ed 2026-10-29T21:32:40.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-e84bd2e088db721e 2026-10-29T21:32:40.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-14cf01fe95c130d8 2026-10-29T21:32:40.000Z weekly 0.7 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-abd3ecc3cd54ed4b 2026-10-29T21:33:02.000Z weekly 0.8 https://radar.offseq.com/threat/esphome-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-969bc847f07f1e08 2026-10-29T21:34:10.000Z weekly 0.9 https://radar.offseq.com/threat/esphome-starlette-has-possible-denial-of-service-vector-when-parsing-large-files-in-multipart-forms-4af0e4abfad4204e 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/esphome-starlette-vulnerable-to-on2-dos-via-range-header-merging-in-starletteresponsesfileresponse-9dd34cb229868875 2026-10-29T21:34:10.000Z weekly 0.8 https://radar.offseq.com/threat/brotli-out-of-bounds-write-in-the-brotli-decoder-node2shell-also-affects-the-pypi-brotli-package-cve-0b40c1c797dd0916 2026-10-29T21:34:10.000Z weekly 0.9 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-88bd7687e04cc9fe 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-b3fec31d4842c99f 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-c0998c2ca0ec1c39 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-50142c35f7986ec9 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-116a7a63db13338b 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-d0ee175d6fe0b3f4 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-01009548b6f66c60 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-2256f4366584535b 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-76f5d1168e22cf5d 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-973938e16d20d362 2026-10-29T21:34:10.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-df94a77c77db57b1 2026-10-29T21:34:10.000Z weekly 0.8 https://radar.offseq.com/threat/esphome-cbor2-has-a-denial-of-service-via-uncontrolled-recursion-in-cbor2loads-cve-2026-26209-2964c1cee5a66287 2026-10-29T21:34:10.000Z weekly 0.8 https://radar.offseq.com/threat/esphome-starlette-denial-of-service-dos-via-multipartform-data-cve-2024-47874-021d9fb92c50aecb 2026-10-29T21:34:13.000Z weekly 0.7 https://radar.offseq.com/threat/esphome-zeroconf-has-unbounded-recursion-in-dns-compression-pointer-decoder-that-allows-lan-local-89b957fec165c0dd 2026-10-29T21:34:13.000Z weekly 0.7 https://radar.offseq.com/threat/zeroconf-unbounded-exception-dedup-state-retains-packet-buffers-via-traceback-frame-locals-enabling-8b56548241f9e1d4 2026-10-29T21:34:13.000Z weekly 0.7 https://radar.offseq.com/threat/esphome-zeroconf-has-unbounded-dns-record-cache-that-allows-lan-local-memory-exhaustion-via-multicast-c3398db18881c245 2026-10-29T21:34:13.000Z weekly 0.7 https://radar.offseq.com/threat/python-zeroconf-unbounded-tc-deferred-queue-allows-lan-local-memory-exhaustion-via-spoofed-source-flood-c98d85195af5882f 2026-10-29T21:34:13.000Z weekly 0.7 https://radar.offseq.com/threat/zeroconf-unvalidated-rdlength-in-record-payload-readers-allows-lan-local-cache-corruption-via-crafted-6742597bd6bcc401 2026-10-29T21:34:13.000Z weekly 0.7 https://radar.offseq.com/threat/esphome-starlette-has-missing-host-header-validation-that-poisons-requesturlpath-bypassing-path-based-25c19434c4ca3f0b 2026-10-29T21:34:13.000Z weekly 0.7 https://radar.offseq.com/threat/starlette-arbitrary-http-method-dispatched-to-httpendpoint-attributes-via-getattr-cve-2026-48817-e5526c14642b0b91 2026-10-29T21:34:13.000Z weekly 0.7 https://radar.offseq.com/threat/starlette-unvalidated-request-path-concatenated-into-authority-poisons-requesturlhostname-cve-2026-79a32fb8dc81c800 2026-10-29T21:34:13.000Z weekly 0.7 https://radar.offseq.com/threat/starlette-requestform-limits-silently-ignored-for-applicationx-www-form-urlencoded-enable-dos-cve-2026-9e6ab99cdc03a250 2026-10-29T21:34:13.000Z weekly 0.8 https://radar.offseq.com/threat/chatblade-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-29526c94e25003e1 2026-10-29T21:34:18.000Z weekly 0.9 https://radar.offseq.com/threat/checkdmarc-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-fe99977e1410fba1 2026-10-29T21:35:25.000Z weekly 0.8 https://radar.offseq.com/threat/http-prompt-setuptools-vulnerable-to-command-injection-via-package-url-cve-2024-6345-87b62671c6581068 2026-10-29T21:35:27.000Z weekly 0.8 https://radar.offseq.com/threat/http-prompt-setuptools-has-a-path-traversal-vulnerability-in-packageindexdownload-that-leads-to-1c852bcb6a21e35d 2026-10-29T21:35:27.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-3cd016cbf9a63e27 2026-10-29T21:35:27.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-198ec2b4359ffafd 2026-10-29T21:35:27.000Z weekly 0.7 https://radar.offseq.com/threat/dnsrobocert-filelock-has-a-toctou-race-condition-which-allows-symlink-attacks-during-lock-file-creation-bd091f77fa1611a8 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-ee1c99fcfb92df8b 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/dnsrobocert-aiohttp-server-lacks-an-initial-requestheader-timeout-cve-2026-111064-0b0b02d59c8f5f85 2026-10-29T21:35:34.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-connector-pool-exhaustion-via-max-age-overflow-cve-2026-111065-77cfb33e45a76441 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-file-descriptor-exhaustion-in-multipart-requests-cve-2026-111066-85431d1a8c9c7541 2026-10-29T21:35:34.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-absolute-form-request-targets-can-spoof-requestscheme-cve-2026-111748-6f4e97e87ce18294 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-cookie-from-subdomain-can-remove-host-only-scope-from-existing-cookies-cve-2026-111749-026523418679c1e8 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-pure-python-parser-request-smuggling-cve-2026-111750-5645c001e2b2eeed 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-evicts-a-fresh-lock-file-whose-watched-age-another-local-users-pre-dated-file-1fe457d4575de91d 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-5206cff737a3db80 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-de8495ead1c0f121 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-0bcc6caef8159331 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-85b5025c7c169a91 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-break-restore-follows-a-swapped-in-symbolic-link-and-hard-links-a-file-of-e5d48956ed531859 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-f842cb7d99b62b74 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-2f16b593d4275d4d 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-31b1f6b604c3e1b2 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-9418c95339a82596 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-the-hard-link-route-deletes-any-directory-another-user-renames-onto-its-5984a19a3a99b472 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-911a38dcdaf2bf44 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-f32f1a9015370bec 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-429df22160f0c005 2026-10-29T21:35:34.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-62fa97bc75fc6e41 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/dnsrobocert-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-08c812005a563266 2026-10-29T21:35:34.000Z weekly 0.8 https://radar.offseq.com/threat/dnsrobocert-filelock-time-of-check-time-of-use-toctou-symlink-vulnerability-in-softfilelock-cve-2026-a3ab4170bbef8b35 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/dnsrobocert-soup-sieve-has-memory-exhaustion-via-large-comma-separated-selector-lists-cve-2026-49476-7cc6ef69f0941a59 2026-10-29T21:35:34.000Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-regular-expression-denial-of-service-redos-via-selector-parser-cve-2026-49477-1d8a38f45411b038 2026-10-29T21:35:34.000Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-ea00309657454184 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-e3f9eee42056c3d6 2026-10-29T21:35:34.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-multiple-instances-of-excessive-or-unbounded-memorycpu-use-27650b2064321967 2026-10-29T21:35:34.000Z weekly 0.8 https://radar.offseq.com/threat/grayskull-setuptools-vulnerable-to-command-injection-via-package-url-cve-2024-6345-eed75cc1929edb25 2026-10-29T21:36:13.000Z weekly 0.8 https://radar.offseq.com/threat/grayskull-setuptools-has-a-path-traversal-vulnerability-in-packageindexdownload-that-leads-to-bab9ee4db1002724 2026-10-29T21:36:13.000Z weekly 0.8 https://radar.offseq.com/threat/grayskull-soup-sieve-has-memory-exhaustion-via-large-comma-separated-selector-lists-cve-2026-49476-4004e9e9c3fb5ba3 2026-10-29T21:36:13.000Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-regular-expression-denial-of-service-redos-via-selector-parser-cve-2026-49477-2b79ea1d8ae7664e 2026-10-29T21:36:13.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-3f36c1aabadd5927 2026-10-29T21:36:13.000Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-cfcf6f0a83d65c7f 2026-10-29T21:36:13.000Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-c574b7fbf6f9cfb3 2026-10-29T21:36:13.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-18b0250f3b1b6726 2026-10-29T21:36:13.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-ae1fe6b7ba1c7456 2026-10-29T21:36:33.000Z weekly 0.7 https://radar.offseq.com/threat/cobo-cli-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-fc28034fc07ada5f 2026-10-29T21:36:33.000Z weekly 0.8 https://radar.offseq.com/threat/cobo-cli-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-d5a742876eb148fd 2026-10-29T21:36:33.000Z weekly 0.8 https://radar.offseq.com/threat/cobo-cli-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-5b0df67478867a5c 2026-10-29T21:36:33.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-920246775b7ca133 2026-10-29T21:36:33.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-6a2f289519c4dfaf 2026-10-29T21:36:33.000Z weekly 0.7 https://radar.offseq.com/threat/cobo-cli-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-a03eb2ab5eec36d8 2026-10-29T21:36:33.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-repository-content-can-impersonate-the-git-directory-leading-to-arbitrary-code-execution-cve-dadb7ee453ff2596 2026-10-29T21:36:57.000Z weekly 0.8 https://radar.offseq.com/threat/gitup-untrusted-search-path-under-some-conditions-on-windows-allows-arbitrary-code-execution-cve-2024-f2d633a8719f0645 2026-10-29T21:37:15.000Z weekly 0.8 https://radar.offseq.com/threat/gitup-gitpython-submodule-update-path-traversal-can-write-outside-the-repository-cve-2026-100689-c326569a6b30f37a 2026-10-29T21:37:15.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-2671b9b2187662dc 2026-10-29T21:37:15.000Z weekly 0.8 https://radar.offseq.com/threat/gitup-gitpython-reference-apis-has-a-path-traversal-vulnerability-that-allows-arbitrary-file-write-and-8f08be48480d18ee 2026-10-29T21:37:15.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-git-long-option-prefix-abbreviation-bypass-of-cve-2026-42215-blocklist-6f90693ab1df281f 2026-10-29T21:37:15.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-section-name-injection-enables-arbitrary-config-directives-coresshcommand-rce-cve-05e6bb604f05a2a3 2026-10-29T21:37:15.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitarchiveoptions-denylist-omits-add-file-add-virtual-file-enabling-1f4009b97d2432ad 2026-10-29T21:37:15.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-indexfilecheckout-and-tagreferencecreate-enables-27f097bdc925fe80 2026-10-29T21:37:15.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitcloneoptions-denylist-omits-template-enabling-arbitrary-command-183ba23e20f77879 2026-10-29T21:37:15.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unguarded-git-read-tree-option-forwarding-in-indexfilefromtreeresetmergetree-enables-eb360e09dc1322c1 2026-10-29T21:37:15.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-local-file-content-disclosure-via-include-directive-in-untrusted-gitmodules-218ef0989bde0d19 2026-10-29T21:37:15.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-dormant-multi-line-git-config-values-are-corrupted-into-live-injected-directives-eg-cve-2026-4a09a505a6ce81ea 2026-10-29T21:37:15.000Z weekly 0.9 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitrevisionoptions-denylist-omits-contents-s-enabling-arbitrary-file-read-8dadcb20ede3f259 2026-10-29T21:37:15.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-tagreferencecreate-positional-reference-bypasses-kwargs-only-file-guard-enabling-arbitrary-82e0c9c344792229 2026-10-29T21:37:15.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-c9c5137da7d426ef 2026-10-29T21:37:21.000Z weekly 0.7 https://radar.offseq.com/threat/gitup-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-lines-3a701c170ab535f6 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitup-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-9b74281e8b386843 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitup-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-c27484e26d77b40e 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-c5c9628b62b324e2 2026-10-29T21:37:21.000Z weekly 0.7 https://radar.offseq.com/threat/gitup-gitpython-validates-a-submodules-git-path-only-after-cloning-into-it-rce-cve-2026-114145-60303eff72e32acd 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitup-gitpython-has-command-injection-via-git-options-bypass-cve-2026-42215-59b7acdab0c5c776 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-option-check-validates-multioptions-before-shlexsplit-transformation-cve-2026-42284-3673051b3aee598a 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwritersetvalue-enables-rce-via-corehookspath-cve-2026-44244-bdd63875ebd6cb9e 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-ospathexpandvars-on-repoclonefrom-url-cve-2026-67322-69f0daa01480c1e0 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-unguarded-git-options-in-repoarchive-gitlsremote-and-arbitrary-file-ba48eec9ca4d431f 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitup-gitpython-unsafe-clone-option-gate-bypass-through-joined-short-options-cve-2026-67324-e2e308a1edf4bbff 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwriter-section-parameter-bypasses-cve-2026-42215-patch-enabling-0fdf09410faf07ea 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-truncation-via-git-rev-list-output-argument-injection-in-unguarded-commitcount-e221d8ce41400462 2026-10-29T21:37:21.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-repocreateremote-remoteadd-url-incomplete-fix-of-09706aa8962b9f44 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-overwrite-via-git-diff-output-argument-injection-in-diffablediff-key-and-42da9f30ad963552 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-single-character-kwarg-value-token-smuggling-enables-0df5fee1b17d9e95 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-pathspec-from-file-in-indexfileremove-and-headcheckout-cve-2026-76217-698337ccc0f2caef 2026-10-29T21:37:21.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-repoinit-enables-arbitrary-command-execution-via-template-99d799c62987920d 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-splitsinglecharoptionsfalse-short-option-token-smuggling-bd45560ab4556930 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-option-name-injection-via-whitespace-bypasses-name-validator-enabling-forged-d5335cf161650151 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-git-repository-creation-outside-the-working-tree-via-unvalidated-gitmodules-6a1286793ea631b4 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-clonefromclone-omit-separate-git-dir-from-unsafegitcloneoptions-enabling-arbitrary-857bd1f9318cd913 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-denial-of-service-via-catastrophic-backtracking-redos-in-actornameemailregex-commit-e647a758a6514cfd 2026-10-29T21:37:21.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-8871433d17250c92 2026-10-29T21:37:43.000Z weekly 0.7 https://radar.offseq.com/threat/dulwich-infinite-loop-denial-of-service-dos-in-packfile-object-resolution-cve-2026-114095-110e93cf1c116dc1 2026-10-29T21:37:43.000Z weekly 0.7 https://radar.offseq.com/threat/multidict-reference-leak-in-cimultidictmultidict-items-view-union-and-subtraction-cve-2026-104874-e990804698f78e02 2026-10-29T21:37:58.000Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-f00d9c15eb1c4c59 2026-10-29T21:37:58.000Z weekly 0.7 https://radar.offseq.com/threat/langgraph-cli-prints-the-registry-push-token-in-langgraph-deploy-verbose-output-cve-2026-115885-3703d12ca3a94993 2026-10-29T21:38:16.000Z weekly 0.7 https://radar.offseq.com/threat/langgraph-unencoded-identifiers-in-langgraph-sdk-v3-streaming-can-redirect-authenticated-get-requests-d1d564ff38a6b7dc 2026-10-29T21:38:16.000Z weekly 0.7 https://radar.offseq.com/threat/marked-vulnerable-to-oom-denial-of-service-via-infinite-recursion-in-marked-tokenizer-cve-2026-41680-9755fb3ffaa91a7a 2026-10-29T21:38:46.000Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-de338408108b096d 2026-10-29T21:38:54.000Z weekly 0.7 https://radar.offseq.com/threat/internetarchive-is-vulnerable-to-directory-traversal-through-file-downloads-cve-2025-58438-126fe80c2365a14c 2026-10-29T21:39:15.000Z weekly 0.9 https://radar.offseq.com/threat/conda-lock-untrusted-search-path-under-some-conditions-on-windows-allows-arbitrary-code-execution-cve-8d5cdfc94e0ad223 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-setuptools-vulnerable-to-command-injection-via-package-url-cve-2024-6345-9910c0b023917c8a 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-setuptools-has-a-path-traversal-vulnerability-in-packageindexdownload-that-leads-to-60ded61ade110ff7 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-gitpython-submodule-update-path-traversal-can-write-outside-the-repository-cve-2026-100689-aca8a4755164a66e 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-b7e2b1abeebe9f68 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/conda-lock-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-7a9e4a33a7e39de8 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-d71a4986e204faca 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-939b5a925794daa2 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-583eef6a43821577 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-370ef576b2758386 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-018c294dbe289682 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-96adac1d109ad7ac 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-52d90242e5f2696d 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-7e1afb80485b6eb4 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-d038e2fa19679a29 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-d9c313cfead05a15 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-61a6a81988898e86 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-a2a5efd33870c1ff 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-ab494e70fd8f5506 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-f3d6026b993d52bc 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-venv-configuration-readback-can-reinterpret-path-boundaries-cve-2026-113715-9bfac3495cbb8a39 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-builtin-creation-follows-linked-environment-directories-cve-2026-113716-8ad2792527916644 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-pip-seeding-with-download-omits-wheel-digest-verification-cve-2026-113717-e9ccd414b19333a0 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-seed-replacement-does-not-contain-metadata-deletion-paths-cve-2026-113719-b3f2600f8a3ba78a 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-seeded-files-retain-permissions-from-an-older-cache-cve-2026-113720-c664573dc78ec095 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-files-can-follow-existing-destination-links-cve-2026-113721-d5648a8097cf05d2 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-posix-console-launchers-interpret-destination-paths-as-shell-syntax-cve-2026-10870cd1626cb16d 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-prompt-values-can-change-meaning-under-older-compatibility-modes-cve-2026-113723-31a07c3b3405c037 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-virtualenv-bash-activate-runs-commands-from-an-environment-name-with-a-backslash-before-cve-547f6335ffe8246c 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-virtualenv-activate-runs-commands-from-the-environment-name-in-zsh-with-promptsubst-cve-1858f5726011b98c 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-virtualenv-activatefish-runs-commands-from-a-path-or-prompt-with-a-backslash-before-a-quote-379864a3363eedde 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-virtualenv-activation-scripts-run-code-from-a-path-that-contains-a-placeholder-name-cve-ee69da3aacdfa047 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-gitpython-validates-a-submodules-git-path-only-after-cloning-into-it-rce-cve-2026-114145-e2f89382bb4d7d34 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-cfb0013ca2e1ab28 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-gitpython-has-command-injection-via-git-options-bypass-cve-2026-42215-ba60664f07c81703 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-option-check-validates-multioptions-before-shlexsplit-transformation-cve-2026-42284-7089a58903b926b8 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-gitpython-reference-apis-has-a-path-traversal-vulnerability-that-allows-arbitrary-file-47b6799142083c39 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwritersetvalue-enables-rce-via-corehookspath-cve-2026-44244-42fd389a0512758b 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-63dfab211d11a8f8 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-ospathexpandvars-on-repoclonefrom-url-cve-2026-67322-249169d3bc19e6b3 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-unguarded-git-options-in-repoarchive-gitlsremote-and-arbitrary-file-fc39fa5a6c7d1895 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/conda-lock-gitpython-unsafe-clone-option-gate-bypass-through-joined-short-options-cve-2026-67324-6e1b3abd5e23cf82 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-git-long-option-prefix-abbreviation-bypass-of-cve-2026-42215-blocklist-b97eab717f28819c 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwriter-section-parameter-bypasses-cve-2026-42215-patch-enabling-1e745d9cb0a8f648 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-section-name-injection-enables-arbitrary-config-directives-coresshcommand-rce-cve-620b70dc0ecfa31f 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitarchiveoptions-denylist-omits-add-file-add-virtual-file-enabling-a8213e29632c3433 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-indexfilecheckout-and-tagreferencecreate-enables-c934b06a4b78690e 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-truncation-via-git-rev-list-output-argument-injection-in-unguarded-commitcount-84f4493683f45677 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-repocreateremote-remoteadd-url-incomplete-fix-of-124a0a7e454549c8 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitcloneoptions-denylist-omits-template-enabling-arbitrary-command-443455a59642efbb 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-overwrite-via-git-diff-output-argument-injection-in-diffablediff-key-and-874e8fddd526d2b2 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-single-character-kwarg-value-token-smuggling-enables-2e0300ce521de6cb 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-pathspec-from-file-in-indexfileremove-and-headcheckout-cve-2026-76217-8c46282fe562330e 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-repoinit-enables-arbitrary-command-execution-via-template-33ef9d3edf07bf43 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unguarded-git-read-tree-option-forwarding-in-indexfilefromtreeresetmergetree-enables-ec849c05d2fb557f 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-splitsinglecharoptionsfalse-short-option-token-smuggling-338657a6ce62b039 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-option-name-injection-via-whitespace-bypasses-name-validator-enabling-forged-df8485daf5fa5356 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-git-repository-creation-outside-the-working-tree-via-unvalidated-gitmodules-791233772242f3c7 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-local-file-content-disclosure-via-include-directive-in-untrusted-gitmodules-6e741a86ff981de0 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-dormant-multi-line-git-config-values-are-corrupted-into-live-injected-directives-eg-cve-2026-e8d67701a2cec7cc 2026-10-29T21:39:28.000Z weekly 0.9 https://radar.offseq.com/threat/gitpython-clonefromclone-omit-separate-git-dir-from-unsafegitcloneoptions-enabling-arbitrary-951d6b0eda30ef70 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitrevisionoptions-denylist-omits-contents-s-enabling-arbitrary-file-read-137af66b1cd1b880 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-tagreferencecreate-positional-reference-bypasses-kwargs-only-file-guard-enabling-arbitrary-87081814b464c614 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-repository-content-can-impersonate-the-git-directory-leading-to-arbitrary-code-execution-cve-82af3e16b7b071d1 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-denial-of-service-via-catastrophic-backtracking-redos-in-actornameemailregex-commit-a8609d3fd620a900 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/dulwich-symlink-directory-traversal-in-filter-branch-indexfilter-via-cross-commit-state-persistence-ce150c24864d43a4 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/dulwich-symlink-write-through-in-checkoutpaths-via-raw-osopen-bypasses-all-symlink-protections-cve-8ecc295693088762 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/dulwich-symlink-directory-traversal-in-stash-pop-allows-arbitrary-file-write-via-intermediate-09e1a59c9237f61f 2026-10-29T21:39:28.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-61a046422bf824b3 2026-10-29T21:39:28.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-221017d27007e97d 2026-10-29T21:40:00.000Z weekly 0.7 https://radar.offseq.com/threat/opentelemetry-python-unbounded-tracestate-parsing-in-opentelemetry-api-cve-2026-114603-69514fa3c98a9387 2026-10-29T21:40:54.000Z weekly 0.7 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-185c356ad87eaa07 2026-10-29T21:40:54.000Z weekly 0.8 https://radar.offseq.com/threat/pyjwt-hs256384512-verify-accepts-empty-hmac-key-via-oct-jwk-pyjwkpyjwkclient-enabling-token-forgery-5ce819ada8f52088 2026-10-29T21:40:54.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-4fb292765ad820a2 2026-10-29T21:40:54.000Z weekly 0.7 https://radar.offseq.com/threat/nvchecker-tornado-vulnerable-to-excessive-logging-caused-by-malformed-multipart-form-data-cve-2025-ef6af21f9a3c01f6 2026-10-29T21:41:13.000Z weekly 0.8 https://radar.offseq.com/threat/nvchecker-tornado-has-incomplete-validation-of-cookie-attributes-cve-2026-35536-218df59881f8d172 2026-10-29T21:41:13.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-authorization-header-forwarded-across-cross-origin-redirects-in-simpleasynchttpclient-cve-2026-adfddf64d6482058 2026-10-29T21:41:13.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-unbounded-query-string-argument-count-allows-event-loop-stalling-dos-cve-2026-103261-11fd048b57cb6ba2 2026-10-29T21:41:13.000Z weekly 0.7 https://radar.offseq.com/threat/nvchecker-inconsistent-interpretation-of-http-requests-http-requestresponse-smuggling-in-tornado-cve-711a9431cfc0d177 2026-10-29T21:41:13.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-multipart-split-creates-huge-temp-list-before-maxparts-check-memory-amplification-dos-18e8794eb7059197 2026-10-29T21:41:13.000Z weekly 0.7 https://radar.offseq.com/threat/nvchecker-tornado-has-an-http-cookie-parsing-dos-vulnerability-cve-2024-52804-bfffb884b6dcfc8f 2026-10-29T21:41:23.000Z weekly 0.8 https://radar.offseq.com/threat/nvchecker-tornado-vulnerable-to-header-injection-and-xss-via-reason-argument-cve-2025-67724-3fa4780b946236aa 2026-10-29T21:41:23.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-quadratic-dos-via-repeated-header-coalescing-cve-2025-67725-c364990b0580fcf8 2026-10-29T21:41:23.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-quadratic-dos-via-crafted-multipart-parameters-cve-2025-67726-d6edde51d32c3d56 2026-10-29T21:41:23.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-event-loop-blocking-and-excess-memory-use-from-chunked-bodies-with-many-small-chunks-cve-2026-ebb2b407ca225c11 2026-10-29T21:41:23.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-quadratic-cpu-usage-when-parsing-http-headers-with-line-folding-cve-2026-116577-b443e50f6b6128e5 2026-10-29T21:41:23.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-open-redirect-in-redirecthandler-via-protocol-relative-urls-cve-2026-116578-6f28348279ef272d 2026-10-29T21:41:23.000Z weekly 0.7 https://radar.offseq.com/threat/nvchecker-tornado-is-vulnerable-to-dos-due-to-too-many-multipart-parts-cve-2026-31958-3ce773c8fc555381 2026-10-29T21:41:23.000Z weekly 0.8 https://radar.offseq.com/threat/nvchecker-tornado-has-out-of-bounds-memory-access-via-c-extension-cve-2026-49854-2bc1c4a2de8eb6e3 2026-10-29T21:41:23.000Z weekly 0.7 https://radar.offseq.com/threat/nvchecker-tornado-asynchttpclient-accumulates-decompressed-chunks-without-size-limit-gzip-bomb-cve-f20916b0a5c6739a 2026-10-29T21:41:23.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-urlencoded-body-parsing-omits-maxnumfields-so-one-request-can-stall-the-event-loop-cve-2026-154df145707b1fc9 2026-10-29T21:41:23.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-staticfilehandler-follows-symlinks-outside-static-root-path-traversal-cve-2026-103263-a4baaf09271d17db 2026-10-29T21:41:23.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-curlasynchttpclient-enforces-no-response-size-limit-decompression-bomb-drives-unbounded-memory-764e97086afc3ee2 2026-10-29T21:41:23.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-curlasynchttpclient-leaks-per-request-credentials-on-handle-reuse-cve-2026-91992-8b8db299fbb4ec2e 2026-10-29T21:41:23.000Z weekly 0.7 https://radar.offseq.com/threat/nvchecker-tornado-has-a-crlf-injection-in-curlasynchttpclient-headers-cve-2024-58384-03171d9f7a152e24 2026-10-29T21:41:23.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-incomplete-fix-for-cve-2026-35536-cookie-attribute-injection-re-opened-via-the-legacy-case-8ae579c67e10e9bd 2026-10-29T21:41:23.000Z weekly 0.7 https://radar.offseq.com/threat/pi-agent-pi-loads-project-local-extensions-without-approval-cve-2026-54325-e7f8b0d54a6bcf5e 2026-10-29T21:41:30.000Z weekly 0.7 https://radar.offseq.com/threat/pi-agent-potential-xss-in-html-session-exports-via-markdown-url-sanitization-bypass-cve-2026-54326-4f72d5f571e14ceb 2026-10-29T21:41:30.000Z weekly 0.7 https://radar.offseq.com/threat/pi-agent-race-condition-in-pi-authjson-writes-could-expose-stored-credentials-cve-2026-54327-efe988918a989f13 2026-10-29T21:41:30.000Z weekly 0.7 https://radar.offseq.com/threat/pi-agent-predictable-temporary-extension-install-paths-allow-local-privilege-escalation-on-shared-10439829123c4f47 2026-10-29T21:41:30.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-jwsjwt-accepts-unknown-crit-headers-rfc-violation-possible-authz-bypass-cve-2025-59420-296d027093e6f7c9 2026-10-29T21:42:00.000Z weekly 0.8 https://radar.offseq.com/threat/safety-authlib-incomplete-algorithm-confusion-fix-permits-hmac-forgery-with-prefixed-public-keys-cve-68fa209fb1f8c2dc 2026-10-29T21:42:00.000Z weekly 0.8 https://radar.offseq.com/threat/safety-authlib-accepts-an-empty-hmac-key-allowing-jwsjwt-signature-forgery-hs256hs384hs512-cve-2026-716cb483e0fcc734 2026-10-29T21:42:00.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-id-token-can-disable-its-own-nonce-validation-via-the-noncesupported-claim-cve-2026-114617-48c1992b7e347d4f 2026-10-29T21:42:00.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-default-jwt-bearer-grant-accepts-assertions-for-the-wrong-audience-cve-2026-114618-9536cbb9fee58442 2026-10-29T21:42:00.000Z weekly 0.7 https://radar.offseq.com/threat/safety-authlib-vulnerable-to-jwe-rsa15-bleichenbacher-padding-oracle-cve-2026-28490-603ca782354e6e49 2026-10-29T21:42:00.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-setting-alg-none-and-a-blank-signature-appears-to-bypass-signature-verification-cve-2026-28802-399a0322ec82e25d 2026-10-29T21:42:00.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-empty-signatures-validation-in-jws-json-deserialization-cve-2026-96760-1eb0e09e3fab4aa6 2026-10-29T21:42:00.000Z weekly 0.9 https://radar.offseq.com/threat/safety-nltk-has-a-zip-slip-vulnerability-cve-2025-14009-0cf03295cfe3fce2 2026-10-29T21:42:01.000Z weekly 0.9 https://radar.offseq.com/threat/safety-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-3b0df83cded9fc75 2026-10-29T21:42:01.000Z weekly 0.9 https://radar.offseq.com/threat/safety-authlib-is-vulnerable-to-denial-of-service-via-oversized-jose-segments-cve-2025-61920-9c2e3ce603df2077 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-jwe-zipdef-decompression-bomb-enables-dos-cve-2025-62706-3a143aa9569af6e0 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/safety-authlib-has-1-click-account-takeover-vulnerability-cve-2025-68158-a513e2299c65ed48 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/safety-nltk-vulnerable-to-eval-injection-via-collocations-cli-arguments-cve-2025-71408-1abd78d3d259cd8e 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-nltk-has-arbitrary-file-read-via-absolute-path-input-in-nltkutilfilestring-cve-2026-0846-fd8f14cc36e98698 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-nltk-has-a-path-traversal-issue-cve-2026-0847-a2f3aa7abd4eb8d8 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-nltk-versions-392-are-vulnerable-to-arbitrary-code-execution-due-to-improper-input-cve-2026-0848-e24809f54ff3067c 2026-10-29T21:42:01.000Z weekly 0.9 https://radar.offseq.com/threat/nltk-wekaclassifier-passes-an-unvalidated-caller-controlled-model-path-to-the-weka-jvm-bypassing-c5e24b5d9b5e33cc 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-6386dcfbae5c8144 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-0c683179db40c374 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-1f809a2df4146686 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-742f0334728565d8 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-70ee97b732937b7b 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-c619395833d39bcb 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-6bf3562ac2ff08b7 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-427dedf62f923e92 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-13d9aaccc8db4df9 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-b29095a57a8d01ab 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-issecuretransport-loopback-exemption-can-be-bypassed-with-a-userinfo-component-allowing-4216aa7873823b1b 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-openid-implicit-grant-checks-raw-scope-instead-of-allowed-scope-before-issuing-id-tokens-cve-65f3e0a2715f07c0 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-unvalidated-requesturi-fetch-in-jwt-secured-authorization-request-jar-leading-to-ssrf-cve-2026-58d575bb7c00f6bb 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/safety-natural-language-toolkit-nltk-redos-in-nltk-reviewscorpusreader-features-regex-cve-2026-12061-afa88bb35b0dd497 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-natural-language-toolkit-nltk-path-traversal-in-nkjpcorpusreader-leads-to-arbitrary-file-read-d3baa2fb29f664ae 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-natural-language-toolkit-nltk-has-path-traversal-in-framenetcorpusreaderframe-that-allows-20471ca620000292 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-natural-language-toolkit-nltk-dns-rebinding-ssrf-filter-bypass-in-nltkpathsecurlopen-5a3d1c3e7a33cc7f 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-nltk-stanford-wrapper-classes-execute-untrusted-jar-files-without-verification-cve-2026-12252-04f497101eb63c4a 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-nltk-downloader-allows-cross-package-resource-and-model-poisoning-cve-2026-12261-86e62798b4d4af5b 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/safety-nltk-network-url-validation-permits-ssrf-to-rfc-6598-shared-address-space-hosts-cve-2026-12372-f32b720a4f16d3ca 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/nltk-uncontrolled-resource-consumption-in-recursivedescentparser-via-ambiguous-or-left-recursive-98e1f18871231de1 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-jws-jwk-header-injection-signature-verification-bypass-cve-2026-27962-5c3ac89503a4c40f 2026-10-29T21:42:01.000Z weekly 0.9 https://radar.offseq.com/threat/authlib-fail-open-cryptographic-verification-in-oidc-hash-binding-cve-2026-28498-e4f6db406a1ab766 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-nltk-cve-eb64cc2f3d7c9dd0 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/safety-unauthenticated-remote-shutdown-in-nltkappwordnetapp-cve-2026-33231-a0e5aa3a7598572e 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-nltk-has-a-downloader-path-traversal-vulnerability-afo-arbitrary-file-overwrite-cve-2026-33236-1c421afa708ef000 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-cross-site-request-forging-when-using-cache-cve-2026-41425-0090dc1274a6f184 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/safety-authlib-oauth-20-has-open-redirect-in-authorization-api-that-allows-attacker-controlled-54326fc421c6b3f0 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/safety-authlib-oidc-implicithybrid-authorization-vulnerable-to-open-redirect-cve-2026-44681-550487b816e10efd 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/joserfc-b64false-rfc7797-jws-payloads-bypass-jwsregistry-payload-size-limits-during-deserialization-b68a5caa6bd5a23f 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/joserfc-hs256hs384hs512-verify-accepts-emptynil-hmac-key-cross-language-sibling-of-cve-2026-45363-cve-f9473e6b7af71958 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-natural-language-toolkit-nltk-url-encoded-path-traversal-in-nltkdataload-allows-arbitrary-local-b7e6fb611c77b3c0 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-symlink-based-arbitrary-file-read-in-ipipancorpusreader-bypasses-nltkpathsec-entirely-cve-2026-ef79d3dd23b27551 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/nltk-symlink-based-sandbox-bypass-in-framenetcorpusreader-bypasses-the-fix-for-cve-2026-54292-cve-2026-c32cca6d369214a5 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-stable-framenet-and-nkjp-readers-parse-outside-root-xml-cve-2026-62385-3db1231e917acf55 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/nltk-default-enforcefalse-disables-all-pathsec-security-controls-cve-2026-62388-7a7fa9d22f109966 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-ssrf-fail-open-in-validatenetworkurl-via-dns-resolution-failure-cve-2026-63311-5d194de4a7108bcb 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/nltk-streambackedcorpusview-bypasses-pathsecenforce-arbitrary-local-file-read-cve-2026-63312-eac9e1fe01e7c82c 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-filesystempathpointeropen-sandbox-check-is-dead-code-arbitrary-file-read-via-file-protocol-c6b2192ef022d0c9 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/safety-natural-language-toolkit-nltk-has-unbounded-recursion-in-jsontaggeddecoderdecodeobj-may-cause-a362b45b5ad2f3c9 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/nltk-symlink-escape-in-corpusreader-allows-arbitrary-local-file-read-outside-the-corpus-root-cve-2026-88ee10b5bd2e182c 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/safety-nltk-allowlistunpickler-dotted-name-validation-bypass-allows-remote-code-execution-cve-2026-12c175d59f61e4ee 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/safety-nltk-crubadancorpusreader-path-traversal-allows-arbitrary-file-disclosure-cve-2026-71514-3b0452accf689857 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/safety-nltk-tweettokenizer-vulnerable-to-denial-of-service-through-catastrophic-regex-backtracking-cve-c8b4dee8259d313c 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-uncontrolled-search-path-when-invoking-the-graphviz-dot-binary-cve-2026-78680-9b37ed08273fb730 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-entity-expansion-dos-billion-laughs-via-remaining-raw-elementtree-parses-cve-2026-78681-27b8ddb10ef5a261 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-pathsec-ssrf-protection-can-be-bypassed-when-a-proxy-is-configured-cve-2026-78682-e0bd26f9ea475e2d 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-unsafe-pickle-deserialization-in-transitionparser-allows-remote-code-execution-cve-2026-78683-eac4ef692c4f6f6c 2026-10-29T21:42:01.000Z weekly 0.9 https://radar.offseq.com/threat/nltk-allowlisted-pickle-loaders-still-permit-code-execution-in-current-source-cve-2026-79657-9272da6cc7ac3944 2026-10-29T21:42:01.000Z weekly 0.9 https://radar.offseq.com/threat/nltk-corpus-reader-sandbox-bypass-cve-2026-79674-72f773b01a94992f 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-jvm-argument-injection-bypass-via-per-call-options-in-the-nltk-stanford-wrappers-incomplete-fix-of-d2ad2502246f3e47 2026-10-29T21:42:01.000Z weekly 0.9 https://radar.offseq.com/threat/nltk-corpus-readers-follow-symlinks-outside-trusted-roots-despite-pathsec-enforcement-cve-2026-79676-db7ba9bdc27c939b 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-redos-in-nltktexttextfindall-via-unvalidated-user-supplied-regular-expressions-cve-2026-80205-8ff1f840d7b7046c 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-redos-in-nltktgrep-via-unvalidated-user-supplied-regular-expressions-cve-2026-80206-0822a091449d2049 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/nltk-quadratic-time-dos-in-porterstemmer-via-long-runs-of-y-cve-2026-81722-c800cdce183523a8 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/nltk-quadratic-cpu-exhaustion-in-xmlcorpusviewreadxmlfragment-cve-2026-81723-f87d10044fba0074 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/nltk-uncontrolled-recursion-in-nltkfeatstructfeatstructreader-causes-unhandled-recursionerror-dos-via-391d4b8002466c51 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/nltk-pl196xcorpusreader-has-quadratic-redos-on-malformed-tei-blocks-cve-2026-81725-6ec45087595673be 2026-10-29T21:42:01.000Z weekly 0.7 https://radar.offseq.com/threat/nltk-downloaderdownload-follows-hardlinks-and-overwrites-outside-root-files-cve-2026-81727-50e0e1f79ac91a3e 2026-10-29T21:42:01.000Z weekly 0.8 https://radar.offseq.com/threat/dstack-python-multipart-vulnerable-to-content-type-header-redos-cve-2024-24762-604d9103dfd3763e 2026-10-29T21:42:36.000Z weekly 0.8 https://radar.offseq.com/threat/dstack-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-e9ce2f140e9f2e6e 2026-10-29T21:42:36.000Z weekly 0.9 https://radar.offseq.com/threat/dstack-filelock-has-a-toctou-race-condition-which-allows-symlink-attacks-during-lock-file-creation-cve-3fbb476adb180266 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-91bd7ad5330da9f3 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/dstack-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-lines-f36953a70e54114a 2026-10-29T21:42:36.000Z weekly 0.8 https://radar.offseq.com/threat/dstack-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-8be0f8fcb5a9dd7a 2026-10-29T21:42:36.000Z weekly 0.8 https://radar.offseq.com/threat/dstack-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-2945c4f597d4f662 2026-10-29T21:42:36.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-56231c3c2a46b8f3 2026-10-29T21:42:36.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-9fa76f3b95333d5e 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-evicts-a-fresh-lock-file-whose-watched-age-another-local-users-pre-dated-file-7f5c8479519ba141 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-ca14eb7335f22720 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-de605e71fe182b8e 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-ed0f89379123767e 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-b275cf1965065d73 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-break-restore-follows-a-swapped-in-symbolic-link-and-hard-links-a-file-of-9b0be377b4299858 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-ae27af74797aeaee 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-bee19eff4fbefe5a 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-07d90f1bb6dbb671 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-9b6ac10c73345492 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-the-hard-link-route-deletes-any-directory-another-user-renames-onto-its-290e61143179e7a4 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-cd7a7d53a801e21e 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-c3d0d13f9150bd58 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-d67cf00fae2b9a06 2026-10-29T21:42:36.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-56b328ca85bddfe1 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/dstack-filelock-time-of-check-time-of-use-toctou-symlink-vulnerability-in-softfilelock-cve-2026-22701-40e1a0417db988ad 2026-10-29T21:42:36.000Z weekly 0.7 https://radar.offseq.com/threat/dstack-sentrys-python-sdk-unintentionally-exposes-environment-variables-to-subprocesses-cve-2024-40647-9f900ef2a8567f6f 2026-10-29T21:42:37.000Z weekly 0.7 https://radar.offseq.com/threat/dstack-starlette-denial-of-service-dos-via-multipartform-data-cve-2024-47874-0d21c7f4035f1c3a 2026-10-29T21:42:37.000Z weekly 0.7 https://radar.offseq.com/threat/dstack-starlette-has-possible-denial-of-service-vector-when-parsing-large-files-in-multipart-forms-cve-d8206f216a53494c 2026-10-29T21:42:37.000Z weekly 0.7 https://radar.offseq.com/threat/dstack-starlette-vulnerable-to-on2-dos-via-range-header-merging-in-starletteresponsesfileresponse-7504f1be4ae9ece6 2026-10-29T21:42:37.000Z weekly 0.8 https://radar.offseq.com/threat/dstack-paramiko-rsakeypy-allows-the-sha-1-algorithm-cve-2026-44405-4df3914d4c5b9c0c 2026-10-29T21:42:37.000Z weekly 0.7 https://radar.offseq.com/threat/dstack-starlette-has-missing-host-header-validation-that-poisons-requesturlpath-bypassing-path-based-c5509e581a98fa38 2026-10-29T21:42:37.000Z weekly 0.7 https://radar.offseq.com/threat/starlette-arbitrary-http-method-dispatched-to-httpendpoint-attributes-via-getattr-cve-2026-48817-7d18ef430a26343c 2026-10-29T21:42:37.000Z weekly 0.7 https://radar.offseq.com/threat/starlette-unvalidated-request-path-concatenated-into-authority-poisons-requesturlhostname-cve-2026-2758a8b68a170fe7 2026-10-29T21:42:37.000Z weekly 0.7 https://radar.offseq.com/threat/starlette-requestform-limits-silently-ignored-for-applicationx-www-form-urlencoded-enable-dos-cve-2026-09cc40c36fb0cddc 2026-10-29T21:42:37.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-softfilelock-evicts-a-fresh-lock-file-whose-watched-age-another-local-users-pre-dated-file-fe34320301121591 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-87dde7c370ae2192 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-be7f40f99db3731c 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-f96a6af8dd2e5619 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-aa4ab6f6d561f448 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-break-restore-follows-a-swapped-in-symbolic-link-and-hard-links-a-file-of-d9479d7db19bf020 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-f45aab211962f1ca 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-a5dfe105e3825dfb 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-64a253c64b813b56 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-c5074bc4d070f60f 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-the-hard-link-route-deletes-any-directory-another-user-renames-onto-its-f2fe5e7e1370429d 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-75163a3f448d2f2c 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-7a5269be03cb47f8 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-d2172397bef919ff 2026-10-29T21:42:43.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-d6a4c2b506827339 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/oterm-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-94703312ed292cbf 2026-10-29T21:42:43.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-issecuretransport-loopback-exemption-can-be-bypassed-with-a-userinfo-component-allowing-efc6fb2fdedd1587 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/oterm-authlib-incomplete-algorithm-confusion-fix-permits-hmac-forgery-with-prefixed-public-keys-cve-e01c609b4fdb94c2 2026-10-29T21:42:43.000Z weekly 0.8 https://radar.offseq.com/threat/oterm-authlib-accepts-an-empty-hmac-key-allowing-jwsjwt-signature-forgery-hs256hs384hs512-cve-2026-b4114ca91e523935 2026-10-29T21:42:43.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-id-token-can-disable-its-own-nonce-validation-via-the-noncesupported-claim-cve-2026-114617-10afe82bb0ddf627 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-default-jwt-bearer-grant-accepts-assertions-for-the-wrong-audience-cve-2026-114618-55df9f372d385023 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-openid-implicit-grant-checks-raw-scope-instead-of-allowed-scope-before-issuing-id-tokens-cve-c006841075731608 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-unvalidated-requesturi-fetch-in-jwt-secured-authorization-request-jar-leading-to-ssrf-cve-2026-d275b0e8bb829fce 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-d617aa789d56653d 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-92cc11f658c172d1 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-jws-jwk-header-injection-signature-verification-bypass-cve-2026-27962-c6274f1a009db67c 2026-10-29T21:42:43.000Z weekly 0.9 https://radar.offseq.com/threat/authlib-empty-signatures-validation-in-jws-json-deserialization-cve-2026-96760-512ff6a73935f8a6 2026-10-29T21:42:43.000Z weekly 0.9 https://radar.offseq.com/threat/oterm-fastmcp-mcp-client-wrappers-construct-m2m-oauth-providers-without-issuer-binding-client-secret-d55b13370c1946c1 2026-10-29T21:42:43.000Z weekly 0.7 https://radar.offseq.com/threat/mac-cleanup-py-pygments-has-regular-expression-denial-of-service-redos-due-to-inefficient-regex-for-890ed9faa77dab03 2026-10-29T21:42:46.000Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-fedd6e03d684ec2d 2026-10-29T21:42:56.000Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-f07894cb92fb03af 2026-10-29T21:42:56.000Z weekly 0.7 https://radar.offseq.com/threat/pdm-project-local-state-and-config-writes-follow-symlinks-cve-2026-47763-378bca26d4af7a79 2026-10-29T21:42:58.000Z weekly 0.7 https://radar.offseq.com/threat/pdm-path-traversal-in-wheel-installation-via-overridden-writetofs-cve-2026-47764-34e7094cb3afece5 2026-10-29T21:42:58.000Z weekly 0.8 https://radar.offseq.com/threat/pdm-project-controlled-pdm-plugins-content-executes-before-cli-parsing-cve-2026-47781-e3dc842e67c79ada 2026-10-29T21:42:58.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-4d8c6f566f7ff1ce 2026-10-29T21:43:07.000Z weekly 0.7 https://radar.offseq.com/threat/standardebooks-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-f185de89452004be 2026-10-29T21:43:07.000Z weekly 0.8 https://radar.offseq.com/threat/standardebooks-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-33e027cd4d719432 2026-10-29T21:43:07.000Z weekly 0.8 https://radar.offseq.com/threat/standardebooks-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-4315ae8b53121d09 2026-10-29T21:43:07.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-e1b8cac1c7602bc9 2026-10-29T21:43:07.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-bdb39e4b7ccf6dd5 2026-10-29T21:43:07.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-34fe9e22121ef02d 2026-10-29T21:43:07.000Z weekly 0.7 https://radar.offseq.com/threat/mk-gitpython-submodule-update-path-traversal-can-write-outside-the-repository-cve-2026-100689-17f62cc960347326 2026-10-29T21:43:10.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-a797239651418f2e 2026-10-29T21:43:10.000Z weekly 0.8 https://radar.offseq.com/threat/mk-gitpython-reference-apis-has-a-path-traversal-vulnerability-that-allows-arbitrary-file-write-and-ef2650521a15943c 2026-10-29T21:43:10.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-git-long-option-prefix-abbreviation-bypass-of-cve-2026-42215-blocklist-91ed3053f1584187 2026-10-29T21:43:10.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-section-name-injection-enables-arbitrary-config-directives-coresshcommand-rce-cve-1120ba00a2cca607 2026-10-29T21:43:10.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitarchiveoptions-denylist-omits-add-file-add-virtual-file-enabling-7dcc590f3c1dbcb9 2026-10-29T21:43:10.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-indexfilecheckout-and-tagreferencecreate-enables-1991bd9f23f6c1d3 2026-10-29T21:43:10.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitcloneoptions-denylist-omits-template-enabling-arbitrary-command-0ce4c50e10be42fd 2026-10-29T21:43:10.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unguarded-git-read-tree-option-forwarding-in-indexfilefromtreeresetmergetree-enables-9153abf6b40739d3 2026-10-29T21:43:10.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-local-file-content-disclosure-via-include-directive-in-untrusted-gitmodules-7defb5e3774ea865 2026-10-29T21:43:10.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-dormant-multi-line-git-config-values-are-corrupted-into-live-injected-directives-eg-cve-2026-c35bb3a380a358b4 2026-10-29T21:43:10.000Z weekly 0.9 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitrevisionoptions-denylist-omits-contents-s-enabling-arbitrary-file-read-39ed24392129724f 2026-10-29T21:43:10.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-tagreferencecreate-positional-reference-bypasses-kwargs-only-file-guard-enabling-arbitrary-e07a2161558b787c 2026-10-29T21:43:10.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-repository-content-can-impersonate-the-git-directory-leading-to-arbitrary-code-execution-cve-bb3760febcc9a7ad 2026-10-29T21:43:10.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-b15911e7162570a3 2026-10-29T21:43:12.000Z weekly 0.7 https://radar.offseq.com/threat/mk-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-lines-b2472caeb5ff5bb2 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/mk-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-336ef28511a906b6 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/mk-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-command-3e98395fd6216c20 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-7ee55a7abfb99ebf 2026-10-29T21:43:12.000Z weekly 0.7 https://radar.offseq.com/threat/mk-gitpython-validates-a-submodules-git-path-only-after-cloning-into-it-rce-cve-2026-114145-fceb6bcc0249f0b9 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/mk-gitpython-has-command-injection-via-git-options-bypass-cve-2026-42215-534a24c038e34a11 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-option-check-validates-multioptions-before-shlexsplit-transformation-cve-2026-42284-57fb12b2edc9a39b 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwritersetvalue-enables-rce-via-corehookspath-cve-2026-44244-184b6de8a6d57772 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-66bb0997f24a1496 2026-10-29T21:43:12.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-ospathexpandvars-on-repoclonefrom-url-cve-2026-67322-89e4971cdc52fab3 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-unguarded-git-options-in-repoarchive-gitlsremote-and-arbitrary-file-2541cb104ee3b0b6 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/mk-gitpython-unsafe-clone-option-gate-bypass-through-joined-short-options-cve-2026-67324-b4c75bc1aa598be5 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwriter-section-parameter-bypasses-cve-2026-42215-patch-enabling-b374f4e1c44d1ebd 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-truncation-via-git-rev-list-output-argument-injection-in-unguarded-commitcount-90655d95d7f6aa63 2026-10-29T21:43:12.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-repocreateremote-remoteadd-url-incomplete-fix-of-3595806231fac809 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-overwrite-via-git-diff-output-argument-injection-in-diffablediff-key-and-9116f43a35d29dd7 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-single-character-kwarg-value-token-smuggling-enables-ed528608d7a7a147 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-pathspec-from-file-in-indexfileremove-and-headcheckout-cve-2026-76217-abbd971424528e8e 2026-10-29T21:43:12.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-repoinit-enables-arbitrary-command-execution-via-template-37e9aff74b1aac61 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-splitsinglecharoptionsfalse-short-option-token-smuggling-bbd7a6a9f6ed3958 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-option-name-injection-via-whitespace-bypasses-name-validator-enabling-forged-654d62e983598710 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-git-repository-creation-outside-the-working-tree-via-unvalidated-gitmodules-c50526ab89a0e6c2 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-clonefromclone-omit-separate-git-dir-from-unsafegitcloneoptions-enabling-arbitrary-07eda25aa5160767 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-denial-of-service-via-catastrophic-backtracking-redos-in-actornameemailregex-commit-62e7247147a12785 2026-10-29T21:43:12.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-4a83e616217d2725 2026-10-29T21:43:12.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-95017a39b0c46811 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-5f6265fc16744d41 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-d92fac4ba34ace09 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-50f4af70a5739dee 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-5790ad1914bc553f 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-4ca377e2f60eae0a 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-3d38977cb6a3f8ee 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-10c6f76a1643e3dc 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-7899409a824bd0bf 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-f2c51f50e2f5058e 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-builtin-creation-follows-linked-environment-directories-cve-2026-113716-a6df0ba3b241d4c6 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-seed-replacement-does-not-contain-metadata-deletion-paths-cve-2026-113719-9fc57cb71dfcffcf 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-seeded-files-retain-permissions-from-an-older-cache-cve-2026-113720-37fa01cefc7b7a5e 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-files-can-follow-existing-destination-links-cve-2026-113721-e754f7033dd10d52 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-posix-console-launchers-interpret-destination-paths-as-shell-syntax-cve-2026-229133246b899c6f 2026-10-29T21:44:05.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-prompt-values-can-change-meaning-under-older-compatibility-modes-cve-2026-113723-fa3c68c200a3b970 2026-10-29T21:44:05.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-deletion-recovery-can-change-a-symlink-targets-mode-cve-2026-113724-e703c68539354e0d 2026-10-29T21:44:05.000Z weekly 0.7 https://radar.offseq.com/threat/pdm-virtualenv-bash-activate-runs-commands-from-an-environment-name-with-a-backslash-before-cve-2026-bbd115b97707dfff 2026-10-29T21:44:05.000Z weekly 0.8 https://radar.offseq.com/threat/pdm-virtualenv-activate-runs-commands-from-the-environment-name-in-zsh-with-promptsubst-cve-2026-113726-1a958c263056a49b 2026-10-29T21:44:05.000Z weekly 0.8 https://radar.offseq.com/threat/pdm-virtualenv-activatefish-runs-commands-from-a-path-or-prompt-with-a-backslash-before-a-quote-cve-b7c3f13012cf222f 2026-10-29T21:44:05.000Z weekly 0.8 https://radar.offseq.com/threat/pdm-virtualenv-activation-scripts-run-code-from-a-path-that-contains-a-placeholder-name-cve-2026-113776-d55c6f47bb0ad3c7 2026-10-29T21:44:05.000Z weekly 0.8 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-2756bbd754c40aa6 2026-10-29T21:44:05.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-activator-leaves-the-prompt-value-unescaped-in-ps1-when-promptvars-is-off-so-prompt-aa18901b3954e0a2 2026-10-29T21:44:05.000Z weekly 0.8 https://radar.offseq.com/threat/messagepack-for-python-out-of-bounds-read-crash-on-unpacker-reuse-after-a-caught-error-cve-2026-57585-d4db5baa6e0c3a3c 2026-10-29T21:44:05.000Z weekly 0.8 https://radar.offseq.com/threat/sickchill-tornado-has-an-http-cookie-parsing-dos-vulnerability-cve-2024-52804-6bb29201b23c4511 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/sickchill-setuptools-vulnerable-to-command-injection-via-package-url-cve-2024-6345-89f5e37421425483 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/sickchill-setuptools-has-a-path-traversal-vulnerability-in-packageindexdownload-that-leads-to-4bccfa399e258e3d 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/sickchill-tornado-vulnerable-to-excessive-logging-caused-by-malformed-multipart-form-data-cve-2025-20393786d6bc7304 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/sickchill-tornado-vulnerable-to-header-injection-and-xss-via-reason-argument-cve-2025-67724-bfd2216dc270651c 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-quadratic-dos-via-repeated-header-coalescing-cve-2025-67725-499de587ad29cafa 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-quadratic-dos-via-crafted-multipart-parameters-cve-2025-67726-9f357f198f526c68 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-softfilelock-evicts-a-fresh-lock-file-whose-watched-age-another-local-users-pre-dated-file-3cf3bdbda70dd917 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-58663330c23613f3 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-6db68beae756fd75 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-f2eac6841168321e 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-8e51aa1110feff65 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-break-restore-follows-a-swapped-in-symbolic-link-and-hard-links-a-file-of-4d915bbd18b54770 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-325105f886974256 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-1d8926ae752fe135 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-c741176b6eafec36 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-the-hard-link-route-deletes-any-directory-another-user-renames-onto-its-fd9dd734b33991fd 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-a74857557a61ca22 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-d7f3e6b955e83efa 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-4e1a4a1cfbb0a034 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-becede2aa935bf01 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-downloaded-wheel-selection-and-caching-precede-verification-cve-2026-113714-29140423185b826d 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-venv-configuration-readback-can-reinterpret-path-boundaries-cve-2026-113715-04252e379b2a9755 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-builtin-creation-follows-linked-environment-directories-cve-2026-113716-0b87afa992e50347 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-pip-seeding-with-download-omits-wheel-digest-verification-cve-2026-113717-425bde3452167eab 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-xonsh-activation-literals-depend-on-the-script-decoding-codec-cve-2026-113718-64a198191ede4402 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-seed-replacement-does-not-contain-metadata-deletion-paths-cve-2026-113719-87987842d92d05ea 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-seeded-files-retain-permissions-from-an-older-cache-cve-2026-113720-86a3f7a4ec40529e 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-files-can-follow-existing-destination-links-cve-2026-113721-a27d88a4bd04a5dc 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-posix-console-launchers-interpret-destination-paths-as-shell-syntax-cve-2026-f5a3b0e25f5fc936 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-prompt-values-can-change-meaning-under-older-compatibility-modes-cve-2026-113723-1b0776eb51df18e6 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-deletion-recovery-can-change-a-symlink-targets-mode-cve-2026-113724-b90fbc280b592e1c 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-a000b80c1eb80e33 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-activator-leaves-the-prompt-value-unescaped-in-ps1-when-promptvars-is-off-so-prompt-5fac36f2aecf6faa 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-event-loop-blocking-and-excess-memory-use-from-chunked-bodies-with-many-small-chunks-cve-2026-2a988dd7e3ac7665 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-quadratic-cpu-usage-when-parsing-http-headers-with-line-folding-cve-2026-116577-e25b76dbe0004c2b 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-open-redirect-in-redirecthandler-via-protocol-relative-urls-cve-2026-116578-8f0e2ca20808aa98 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/sickchill-tornado-is-vulnerable-to-dos-due-to-too-many-multipart-parts-cve-2026-31958-dcc717ec9d3a989c 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/sickchill-tornado-has-incomplete-validation-of-cookie-attributes-cve-2026-35536-9d9d6987f3c8bd08 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/sickchill-soup-sieve-has-memory-exhaustion-via-large-comma-separated-selector-lists-cve-2026-49476-17884ed1365d81d8 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-regular-expression-denial-of-service-redos-via-selector-parser-cve-2026-49477-ff4de23923d8e4f6 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-authorization-header-forwarded-across-cross-origin-redirects-in-simpleasynchttpclient-cve-2026-69512fa92f125e18 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/sickchill-tornado-has-out-of-bounds-memory-access-via-c-extension-cve-2026-49854-74abd94f88602819 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/sickchill-tornado-asynchttpclient-accumulates-decompressed-chunks-without-size-limit-gzip-bomb-cve-4b362806af24569c 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-2b8ce730b057ed9c 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-urlencoded-body-parsing-omits-maxnumfields-so-one-request-can-stall-the-event-loop-cve-2026-fd5ff22647165c82 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-14fad6251e261cc6 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-a8aa7953204d45fb 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-unbounded-query-string-argument-count-allows-event-loop-stalling-dos-cve-2026-103261-71fec25779be406e 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/sickchill-inconsistent-interpretation-of-http-requests-http-requestresponse-smuggling-in-tornado-cve-a75939e4c9765946 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-multipart-split-creates-huge-temp-list-before-maxparts-check-memory-amplification-dos-3add37a19337d669 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-staticfilehandler-follows-symlinks-outside-static-root-path-traversal-cve-2026-103263-12eca7a15774e06a 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-curlasynchttpclient-enforces-no-response-size-limit-decompression-bomb-drives-unbounded-memory-5bd95693dd109a2d 2026-10-29T21:44:32.000Z weekly 0.8 https://radar.offseq.com/threat/tornado-curlasynchttpclient-leaks-per-request-credentials-on-handle-reuse-cve-2026-91992-3bd90ab11e2a9ede 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/sickchill-tornado-has-a-crlf-injection-in-curlasynchttpclient-headers-cve-2024-58384-c7ed096ab29d0a72 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/tornado-incomplete-fix-for-cve-2026-35536-cookie-attribute-injection-re-opened-via-the-legacy-case-e60b37c0e6a8075e 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-1f68b8ddea9f5f01 2026-10-29T21:44:32.000Z weekly 0.7 https://radar.offseq.com/threat/style-dictionary-prototype-pollution-in-converttokendata-utility-function-cve-2026-54639-2e1f5d6ea94f8502 2026-10-29T21:44:34.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-repository-content-can-impersonate-the-git-directory-leading-to-arbitrary-code-execution-cve-4cfefaed2c239eb7 2026-10-29T21:44:34.000Z weekly 0.8 https://radar.offseq.com/threat/tach-gitpython-submodule-update-path-traversal-can-write-outside-the-repository-cve-2026-100689-79e5ee35b3f1060b 2026-10-29T21:44:44.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-312559a876597d5c 2026-10-29T21:44:44.000Z weekly 0.7 https://radar.offseq.com/threat/tach-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-lines-ac87d4d7bbc7e453 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/tach-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-9f00349722719235 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/tach-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-74673febb6a3b3e6 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-252aa85db62326bb 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-a20ae2628fe1041e 2026-10-29T21:44:44.000Z weekly 0.7 https://radar.offseq.com/threat/tach-gitpython-validates-a-submodules-git-path-only-after-cloning-into-it-rce-cve-2026-114145-91b3397115b81718 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/tach-gitpython-has-command-injection-via-git-options-bypass-cve-2026-42215-fed678b3968ed849 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-option-check-validates-multioptions-before-shlexsplit-transformation-cve-2026-42284-bf58b860048d2554 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/tach-gitpython-reference-apis-has-a-path-traversal-vulnerability-that-allows-arbitrary-file-write-and-097d08334e894bed 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwritersetvalue-enables-rce-via-corehookspath-cve-2026-44244-b0167882284ccdf8 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-ospathexpandvars-on-repoclonefrom-url-cve-2026-67322-985554d86a4135bd 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-unguarded-git-options-in-repoarchive-gitlsremote-and-arbitrary-file-0ed442da14e77069 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/tach-gitpython-unsafe-clone-option-gate-bypass-through-joined-short-options-cve-2026-67324-0a916df758166910 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-git-long-option-prefix-abbreviation-bypass-of-cve-2026-42215-blocklist-48b011b8eefa54e3 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwriter-section-parameter-bypasses-cve-2026-42215-patch-enabling-3e58ba486d4dca3b 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-section-name-injection-enables-arbitrary-config-directives-coresshcommand-rce-cve-83962a11014683e4 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitarchiveoptions-denylist-omits-add-file-add-virtual-file-enabling-04e817e9ea196408 2026-10-29T21:44:44.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-indexfilecheckout-and-tagreferencecreate-enables-1ea2db14ea6d6346 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-truncation-via-git-rev-list-output-argument-injection-in-unguarded-commitcount-f09ab84fea4e2ca3 2026-10-29T21:44:44.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-repocreateremote-remoteadd-url-incomplete-fix-of-f40663a227ba7bf6 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitcloneoptions-denylist-omits-template-enabling-arbitrary-command-8ce3243fce63f6be 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-single-character-kwarg-value-token-smuggling-enables-858fc4c4e6cf0a4d 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-pathspec-from-file-in-indexfileremove-and-headcheckout-cve-2026-76217-7463f6d4dedd0b8a 2026-10-29T21:44:44.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-repoinit-enables-arbitrary-command-execution-via-template-b8d44604bc2b741e 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unguarded-git-read-tree-option-forwarding-in-indexfilefromtreeresetmergetree-enables-e82333ecd8dbd786 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-splitsinglecharoptionsfalse-short-option-token-smuggling-d3d281e0ea4bee75 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-option-name-injection-via-whitespace-bypasses-name-validator-enabling-forged-6f125fab61cf7bc4 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-git-repository-creation-outside-the-working-tree-via-unvalidated-gitmodules-53cf00e574078297 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-local-file-content-disclosure-via-include-directive-in-untrusted-gitmodules-92467cb4dfe15232 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-dormant-multi-line-git-config-values-are-corrupted-into-live-injected-directives-eg-cve-2026-a670fb8e3b308b79 2026-10-29T21:44:44.000Z weekly 0.9 https://radar.offseq.com/threat/gitpython-clonefromclone-omit-separate-git-dir-from-unsafegitcloneoptions-enabling-arbitrary-426b61b89d165e9d 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitrevisionoptions-denylist-omits-contents-s-enabling-arbitrary-file-read-73a5b307248fcddd 2026-10-29T21:44:44.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-tagreferencecreate-positional-reference-bypasses-kwargs-only-file-guard-enabling-arbitrary-daa30351cab80db5 2026-10-29T21:44:44.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-denial-of-service-via-catastrophic-backtracking-redos-in-actornameemailregex-commit-922c31202a837ebd 2026-10-29T21:44:44.000Z weekly 0.8 https://radar.offseq.com/threat/tox-virtualenv-allows-command-injection-through-activation-scripts-for-a-virtual-environment-cve-2024-95d65a62336b32d1 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/tox-filelock-has-a-toctou-race-condition-which-allows-symlink-attacks-during-lock-file-creation-cve-aa563972f22d6970 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/tox-virtualenv-bash-and-fish-activation-scripts-execute-commands-embedded-in-paths-cve-2026-102925-6247fd6a0c04d8ab 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-downloaded-seed-wheels-pipsetuptools-are-not-integrity-checked-before-use-cve-2026-102930-4cc54941266bdad9 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/tox-virtualenv-writes-prompt-values-into-pyvenvcfg-without-sanitizing-line-boundaries-allowing-bced3a102b0c19ac 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-evicts-a-fresh-lock-file-whose-watched-age-another-local-users-pre-dated-file-675a9f774f074ade 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-d2fb6d3b31d6a739 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-7a7222dc86cb0d2a 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-99a68b2b765b1115 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-9f697e4a8c72111c 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-break-restore-follows-a-swapped-in-symbolic-link-and-hard-links-a-file-of-9775323af5f248f8 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-7b6b364b3d434a2e 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-e9436d68436bc55c 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-3d1b234c72bd584f 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-14cac69e3522d846 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-the-hard-link-route-deletes-any-directory-another-user-renames-onto-its-79bc0f4107a9ccf7 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-0c38920bfbceba1d 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-d1ab71cbc9eaed56 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-5280c3aafe9288ad 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-596831c40e3bdf42 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-temporary-app-data-can-leave-dangling-seed-package-links-cve-2026-113713-536d9582c8065781 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-builtin-creation-follows-linked-environment-directories-cve-2026-113716-6395fff375f7963d 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-files-can-follow-existing-destination-links-cve-2026-113721-cb26598c110b1331 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-posix-console-launchers-interpret-destination-paths-as-shell-syntax-cve-2026-5d1169e5f56e3b31 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-prompt-values-can-change-meaning-under-older-compatibility-modes-cve-2026-113723-a26399657b967a87 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-deletion-recovery-can-change-a-symlink-targets-mode-cve-2026-113724-c6530396d41e6746 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/tox-virtualenv-bash-activate-runs-commands-from-an-environment-name-with-a-backslash-before-cve-2026-478c700e78734bae 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/tox-virtualenv-activate-runs-commands-from-the-environment-name-in-zsh-with-promptsubst-cve-2026-113726-c1966c762c54569a 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/tox-virtualenv-activatefish-runs-commands-from-a-path-or-prompt-with-a-backslash-before-a-quote-cve-5c294f50e5deb170 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/tox-virtualenv-activation-scripts-run-code-from-a-path-that-contains-a-placeholder-name-cve-2026-113776-a1f1b2e9fd0480ff 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-activator-leaves-the-prompt-value-unescaped-in-ps1-when-promptvars-is-off-so-prompt-ff9f8b17bf582f5e 2026-10-29T21:45:01.000Z weekly 0.8 https://radar.offseq.com/threat/tox-filelock-time-of-check-time-of-use-toctou-symlink-vulnerability-in-softfilelock-cve-2026-22701-a3f232408f852e64 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/tox-virtualenv-has-toctou-vulnerabilities-in-directory-creation-cve-2026-22702-2af9694b19c9b73b 2026-10-29T21:45:01.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-035646838c4f3e0c 2026-10-29T21:45:14.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-beb882721ec4c34e 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-b5608aa4513f60a1 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-56d79b9089c8d46b 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-865419959bb9028f 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-a025bb4125abe88b 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-cd9e54de808b3e18 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-5b8f307b2aea9fdd 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-35a4f3591812cb27 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-98765b8930a4ae86 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-6ad15c3ef409d4f8 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-downloaded-wheel-selection-and-caching-precede-verification-cve-2026-113714-f875297bf37eae37 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-venv-configuration-readback-can-reinterpret-path-boundaries-cve-2026-113715-2cad1cabdfbf6615 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-builtin-creation-follows-linked-environment-directories-cve-2026-113716-5500bf0b38768bd5 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-pip-seeding-with-download-omits-wheel-digest-verification-cve-2026-113717-234171337c818e42 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-xonsh-activation-literals-depend-on-the-script-decoding-codec-cve-2026-113718-5731b43349330ba3 2026-10-29T21:45:34.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-seed-replacement-does-not-contain-metadata-deletion-paths-cve-2026-113719-532f8c2a2ad5bd7b 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-seeded-files-retain-permissions-from-an-older-cache-cve-2026-113720-d88a3c5a46a47089 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-files-can-follow-existing-destination-links-cve-2026-113721-6dc150dd3eac058e 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-posix-console-launchers-interpret-destination-paths-as-shell-syntax-cve-2026-5b631ae4d5a8d9c1 2026-10-29T21:45:34.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-prompt-values-can-change-meaning-under-older-compatibility-modes-cve-2026-113723-8184115e5062e106 2026-10-29T21:45:34.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-deletion-recovery-can-change-a-symlink-targets-mode-cve-2026-113724-201a1c2097603568 2026-10-29T21:45:34.000Z weekly 0.7 https://radar.offseq.com/threat/virtualfish-virtualenv-bash-activate-runs-commands-from-an-environment-name-with-a-backslash-before-2b022237cfdb0ce2 2026-10-29T21:45:34.000Z weekly 0.8 https://radar.offseq.com/threat/virtualfish-virtualenv-activate-runs-commands-from-the-environment-name-in-zsh-with-promptsubst-cve-eb45065b324ac6b0 2026-10-29T21:45:34.000Z weekly 0.8 https://radar.offseq.com/threat/virtualfish-virtualenv-activatefish-runs-commands-from-a-path-or-prompt-with-a-backslash-before-a-quote-c661ef5181245591 2026-10-29T21:45:34.000Z weekly 0.8 https://radar.offseq.com/threat/virtualfish-virtualenv-activation-scripts-run-code-from-a-path-that-contains-a-placeholder-name-cve-3ee3374556ca29b3 2026-10-29T21:45:34.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-activator-leaves-the-prompt-value-unescaped-in-ps1-when-promptvars-is-off-so-prompt-de089e6ac588de44 2026-10-29T21:45:34.000Z weekly 0.8 https://radar.offseq.com/threat/vunnel-orjson-does-not-limit-recursion-for-deeply-nested-json-documents-cve-2024-27454-613509dda9b15614 2026-10-29T21:46:05.000Z weekly 0.8 https://radar.offseq.com/threat/vunnel-zipp-denial-of-service-vulnerability-cve-2024-5569-ac903d8c18587d3d 2026-10-29T21:46:05.000Z weekly 0.7 https://radar.offseq.com/threat/vunnel-orjson-does-not-limit-recursion-for-deeply-nested-json-documents-cve-2025-67221-86dd761ac7cbc3c2 2026-10-29T21:46:05.000Z weekly 0.8 https://radar.offseq.com/threat/gdown-filelock-has-a-toctou-race-condition-which-allows-symlink-attacks-during-lock-file-creation-cve-4fd401ba0b31069a 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-4c95d475a07096a6 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-2a27f90542aef60b 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-b8aa03fce4993fcd 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-88798750e139f519 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-5c115f6413477afd 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-26e76d4d775c018c 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-d91537bd3d98d66c 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-888a82f51fe9487b 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-f7dde77668cd4079 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-442f82d563e4db9f 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-446372c2ef9c5513 2026-10-29T21:46:08.000Z weekly 0.8 https://radar.offseq.com/threat/gdown-filelock-time-of-check-time-of-use-toctou-symlink-vulnerability-in-softfilelock-cve-2026-22701-6ae453b7e508271f 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/gdown-soup-sieve-has-memory-exhaustion-via-large-comma-separated-selector-lists-cve-2026-49476-41f5b387699de46c 2026-10-29T21:46:08.000Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-regular-expression-denial-of-service-redos-via-selector-parser-cve-2026-49477-f32a4dc4fa844db6 2026-10-29T21:46:08.000Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-0a199a8604d69fee 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-ea11c0f88ea8fd01 2026-10-29T21:46:08.000Z weekly 0.7 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-1877b0238eff5caf 2026-10-29T21:46:09.000Z weekly 0.8 https://radar.offseq.com/threat/weaviate-cli-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-3909b3b174818788 2026-10-29T21:46:15.000Z weekly 0.9 https://radar.offseq.com/threat/authlib-jwsjwt-accepts-unknown-crit-headers-rfc-violation-possible-authz-bypass-cve-2025-59420-43e3a2493b99f96f 2026-10-29T21:46:15.000Z weekly 0.8 https://radar.offseq.com/threat/weaviate-cli-authlib-is-vulnerable-to-denial-of-service-via-oversized-jose-segments-cve-2025-61920-8a493a329f850b17 2026-10-29T21:46:15.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-jwe-zipdef-decompression-bomb-enables-dos-cve-2025-62706-8358494845e2498c 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/weaviate-cli-authlib-has-1-click-account-takeover-vulnerability-cve-2025-68158-504f4350faae04c3 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-issecuretransport-loopback-exemption-can-be-bypassed-with-a-userinfo-component-allowing-ba41a2bbdde77472 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/weaviate-cli-authlib-incomplete-algorithm-confusion-fix-permits-hmac-forgery-with-prefixed-public-keys-b0e809fd2e3d24c4 2026-10-29T21:46:15.000Z weekly 0.8 https://radar.offseq.com/threat/weaviate-cli-authlib-accepts-an-empty-hmac-key-allowing-jwsjwt-signature-forgery-hs256hs384hs512-07eb169b7765cbb2 2026-10-29T21:46:15.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-id-token-can-disable-its-own-nonce-validation-via-the-noncesupported-claim-cve-2026-114617-a3e6c7a2945974d3 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-default-jwt-bearer-grant-accepts-assertions-for-the-wrong-audience-cve-2026-114618-e7de646b2fca04f8 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-openid-implicit-grant-checks-raw-scope-instead-of-allowed-scope-before-issuing-id-tokens-cve-58ac3719dec45e33 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-unvalidated-requesturi-fetch-in-jwt-secured-authorization-request-jar-leading-to-ssrf-cve-2026-80648e44ccfc3955 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/authlib-jws-jwk-header-injection-signature-verification-bypass-cve-2026-27962-dc68c4526aec482d 2026-10-29T21:46:15.000Z weekly 0.9 https://radar.offseq.com/threat/weaviate-cli-authlib-vulnerable-to-jwe-rsa15-bleichenbacher-padding-oracle-cve-2026-28490-feb4f44fea9ff6bc 2026-10-29T21:46:15.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-fail-open-cryptographic-verification-in-oidc-hash-binding-cve-2026-28498-efbbcd56eb4f2bf8 2026-10-29T21:46:15.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-setting-alg-none-and-a-blank-signature-appears-to-bypass-signature-verification-cve-2026-28802-3310277af3f75ed7 2026-10-29T21:46:15.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-cross-site-request-forging-when-using-cache-cve-2026-41425-3730b37493dd66c2 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/weaviate-cli-authlib-oauth-20-has-open-redirect-in-authorization-api-that-allows-attacker-controlled-4a28398728e56e95 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/weaviate-cli-authlib-oidc-implicithybrid-authorization-vulnerable-to-open-redirect-cve-2026-44681-1d9bc03ec7389ab9 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/joserfc-b64false-rfc7797-jws-payloads-bypass-jwsregistry-payload-size-limits-during-deserialization-3c183bc9da106b0c 2026-10-29T21:46:15.000Z weekly 0.7 https://radar.offseq.com/threat/joserfc-hs256hs384hs512-verify-accepts-emptynil-hmac-key-cross-language-sibling-of-cve-2026-45363-cve-b5d3dcc26e4d7359 2026-10-29T21:46:15.000Z weekly 0.8 https://radar.offseq.com/threat/authlib-empty-signatures-validation-in-jws-json-deserialization-cve-2026-96760-455318e500973d03 2026-10-29T21:46:15.000Z weekly 0.9 https://radar.offseq.com/threat/yt-dlp-exec-command-injection-when-using-q-in-yt-dlp-on-windows-cve-2024-22423-175251bc1ed1259d 2026-10-29T21:46:26.000Z weekly 0.8 https://radar.offseq.com/threat/yt-dlp-and-youtube-dl-vulnerable-to-file-system-modification-and-rce-through-improper-file-extension-f18bf4d4a5f29fed 2026-10-29T21:46:26.000Z weekly 0.8 https://radar.offseq.com/threat/yt-dlp-scrapy-is-vulnerable-to-a-denial-of-service-dos-attack-due-to-flaws-in-brotli-decompression-2c6adb6a94a22034 2026-10-29T21:46:26.000Z weekly 0.8 https://radar.offseq.com/threat/yt-dlp-arbitrary-command-injection-when-using-the-netrc-cmd-option-cve-2026-26331-a288adff8ae48899 2026-10-29T21:46:26.000Z weekly 0.8 https://radar.offseq.com/threat/yt-dlp-file-downloader-cookie-leak-with-curl-cve-2026-50019-3cd71679f3e00b71 2026-10-29T21:46:26.000Z weekly 0.7 https://radar.offseq.com/threat/yt-dlp-dangerous-file-type-creation-via-insufficient-filename-sanitization-bypass-of-cve-2024-38519-f90691a656b785ac 2026-10-29T21:46:26.000Z weekly 0.8 https://radar.offseq.com/threat/yt-dlp-arbitrary-code-execution-via-manifest-downloads-with-aria2c-cve-2026-50574-f9251fff88f866ef 2026-10-29T21:46:26.000Z weekly 0.8 https://radar.offseq.com/threat/yt-dlp-downstream-command-injection-via-improper-sanitization-of-yt-dlp-write-link-output-cve-2026-ab4589a670d287c2 2026-10-29T21:46:26.000Z weekly 0.8 https://radar.offseq.com/threat/yt-dlp-has-dependency-on-potentially-malicious-third-party-code-in-douyu-extractors-dd4369ac1bffaaa4 2026-10-29T21:46:26.000Z weekly 0.7 https://radar.offseq.com/threat/yt-dlp-arbitrary-command-injection-possible-if-exec-option-used-with-yt-dlp-f4102025b34f3f67 2026-10-29T21:46:26.000Z weekly 0.8 https://radar.offseq.com/threat/brotli-out-of-bounds-write-in-the-brotli-decoder-node2shell-also-affects-the-pypi-brotli-package-cve-3c0e7b6e73b5c321 2026-10-29T21:47:01.000Z weekly 0.9 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-fc6f039abe3cc191 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-275bdf56e61af0e0 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-e702bd6d2c1e86a1 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-f86274f10482515e 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-6913a3edeaa892cf 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-827c0bb280874e8c 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-48d807e6b8ccc119 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-ba586b25699f20ce 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-f188bc5f837a17a1 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-8940de1f8cb5a912 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-971b166ee4cf443f 2026-10-29T21:47:48.000Z weekly 0.7 https://radar.offseq.com/threat/pipenv-virtualenv-allows-command-injection-through-activation-scripts-for-a-virtual-environment-cve-95ec20c5337d8db3 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/pipenv-virtualenv-bash-and-fish-activation-scripts-execute-commands-embedded-in-paths-cve-2026-102925-a0176337884a6190 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-downloaded-seed-wheels-pipsetuptools-are-not-integrity-checked-before-use-cve-2026-102930-ed8446b58da6a8ca 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/pipenv-virtualenv-writes-prompt-values-into-pyvenvcfg-without-sanitizing-line-boundaries-allowing-195501674d92ef54 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-evicts-a-fresh-lock-file-whose-watched-age-another-local-users-pre-dated-file-24d94759644ba936 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-c74b213826966098 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-90ee22890ae97081 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-d0d38869798fe827 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-02fbacf5abe4f867 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-break-restore-follows-a-swapped-in-symbolic-link-and-hard-links-a-file-of-d815bcc056d133bb 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-498e6a467bd39a59 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-bd48957b5f4100da 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-80f1273431c57041 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-05eb1f8ea44c1abf 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-the-hard-link-route-deletes-any-directory-another-user-renames-onto-its-5b273be4bbfd617d 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-8f625d90a78fae76 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-b4bcc04cd36180a8 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-c23337b395c6cc4c 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-d7ab4cf6be8e74d2 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-temporary-app-data-can-leave-dangling-seed-package-links-cve-2026-113713-0148fe9645775e08 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-builtin-creation-follows-linked-environment-directories-cve-2026-113716-ccaecb89ffeddd26 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-files-can-follow-existing-destination-links-cve-2026-113721-fc7a373cfa8e4fd0 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-posix-console-launchers-interpret-destination-paths-as-shell-syntax-cve-2026-f9178a36e102c77d 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-prompt-values-can-change-meaning-under-older-compatibility-modes-cve-2026-113723-c9f1f53f9f1b499d 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-deletion-recovery-can-change-a-symlink-targets-mode-cve-2026-113724-5ff92ccce39b3b78 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/pipenv-virtualenv-bash-activate-runs-commands-from-an-environment-name-with-a-backslash-before-cve-71c13888eb904719 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/pipenv-virtualenv-activate-runs-commands-from-the-environment-name-in-zsh-with-promptsubst-cve-2026-ed3e5ad02a291e8b 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/pipenv-virtualenv-activatefish-runs-commands-from-a-path-or-prompt-with-a-backslash-before-a-quote-cve-91b2fdb2ec30976b 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/pipenv-virtualenv-activation-scripts-run-code-from-a-path-that-contains-a-placeholder-name-cve-2026-01fcb6be5a3086fa 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-activator-leaves-the-prompt-value-unescaped-in-ps1-when-promptvars-is-off-so-prompt-17388a2c51ca2207 2026-10-29T21:48:13.000Z weekly 0.8 https://radar.offseq.com/threat/pipenv-virtualenv-has-toctou-vulnerabilities-in-directory-creation-cve-2026-22702-405b37d3b449b383 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-da8c3e039550cd33 2026-10-29T21:48:13.000Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-d5d0ad04686e42b5 2026-10-29T21:48:42.000Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-3554a3376f7914e8 2026-10-29T21:48:42.000Z weekly 0.7 https://radar.offseq.com/threat/pyjwt-hs256384512-verify-accepts-empty-hmac-key-via-oct-jwk-pyjwkpyjwkclient-enabling-token-forgery-f5c1578bbcd333ee 2026-10-29T21:49:03.000Z weekly 0.8 https://radar.offseq.com/threat/recon-ng-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-dba3120a28e0a057 2026-10-29T21:49:41.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-eb379b758bd0ca9e 2026-10-29T21:50:08.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-1863ef58e9fc88ad 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-17a2b13fddb52036 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-9a3eb8e41244eb63 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-1338aca98e0c201b 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-670d6f54efb537f2 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-6336e694feb95d75 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-82487ff6149da7b0 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-aba7a77a23fb19d3 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-18523f42a363d043 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-9057f03169c8717f 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-5f4b6bdcaf8ed4c2 2026-10-29T21:50:11.000Z weekly 0.7 https://radar.offseq.com/threat/renovate-371580-before-371990-command-injection-via-helmv3-cve-2024-58376-6a8ad24438e2d927 2026-10-29T21:50:23.000Z weekly 0.8 https://radar.offseq.com/threat/renovate-43650-before-4310211-remote-code-execution-via-lockfilemaintenance-cve-2026-76226-90dce6c0da3171b5 2026-10-29T21:50:23.000Z weekly 0.7 https://radar.offseq.com/threat/renovate-42681-before-42963-and-4300-before-4344-environment-variable-exposure-cve-2026-76227-6cdbc8a0bc430330 2026-10-29T21:50:23.000Z weekly 0.7 https://radar.offseq.com/threat/renovate-before-42685-remote-code-execution-via-gradle-wrapper-cve-2026-76228-907f5156876af8b1 2026-10-29T21:50:23.000Z weekly 0.8 https://radar.offseq.com/threat/renovate-392180-before-40330-arbitrary-command-injection-via-kustomize-cve-2026-76229-9689bcc93a090561 2026-10-29T21:50:23.000Z weekly 0.8 https://radar.offseq.com/threat/renovate-35630-before-40330-command-injection-via-npm-cve-2026-76230-56e5a0737ceb0819 2026-10-29T21:50:23.000Z weekly 0.8 https://radar.offseq.com/threat/renovate-321350-before-40330-command-injection-via-hermit-cve-2026-76231-fc4d5d9bd2c42ede 2026-10-29T21:50:23.000Z weekly 0.8 https://radar.offseq.com/threat/renovate-31510-before-40330-command-injection-via-helmv3-cve-2026-76232-0e71bbf2f2449442 2026-10-29T21:50:23.000Z weekly 0.8 https://radar.offseq.com/threat/renovate-39530-before-40330-command-injection-via-gleam-manager-cve-2026-76233-802caa6eb38e4db2 2026-10-29T21:50:23.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-ffb149a88a1f9aa3 2026-10-29T21:51:12.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-01c0631350e90bc1 2026-10-29T21:51:46.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-f3cb07c2e0bbaced 2026-10-29T21:51:46.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-6476f886046d50b3 2026-10-29T21:51:46.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-7c55e0f7a8dc7b0e 2026-10-29T21:51:46.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-6bef548a98f248ed 2026-10-29T21:51:46.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-e0cf16f02362847a 2026-10-29T21:51:46.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-2922bbbcb6819363 2026-10-29T21:51:46.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-7f21ecb19a7c6053 2026-10-29T21:51:46.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-be5b101f053e326e 2026-10-29T21:51:46.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-06250803fab46599 2026-10-29T21:51:46.000Z weekly 0.7 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-325e0365ed4e31af 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/snowflake-cli-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-561b296bc5ae0ce5 2026-10-29T21:51:47.000Z weekly 0.8 https://radar.offseq.com/threat/snowflake-cli-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-1e4dab1682b5a07c 2026-10-29T21:51:47.000Z weekly 0.8 https://radar.offseq.com/threat/snowflake-cli-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-830db0bbaf18ff7d 2026-10-29T21:51:47.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-782375fdc3004097 2026-10-29T21:51:47.000Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-2113032ec112ac8f 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-550fc640d4a1d685 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-1a61c6b0ff55bc64 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-a8fcc32ae2863ce0 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-30506df9a18bf99f 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-2fe4f659fe03dabb 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-bcd4d9028b3d2d46 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-9d56293cdf39f502 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-e06564a4b08537df 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-63fb45f9f93dc394 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-6c6fc289148d9f8b 2026-10-29T21:51:47.000Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-f570606d454d18f7 2026-10-29T21:51:47.000Z weekly 0.7 https://radar.offseq.com/threat/acronym-nltk-has-a-zip-slip-vulnerability-cve-2025-14009-d3db5e5302da101c 2026-10-29T21:52:04.000Z weekly 0.9 https://radar.offseq.com/threat/acronym-nltk-vulnerable-to-eval-injection-via-collocations-cli-arguments-cve-2025-71408-07d40042082711f0 2026-10-29T21:52:04.000Z weekly 0.8 https://radar.offseq.com/threat/acronym-nltk-has-arbitrary-file-read-via-absolute-path-input-in-nltkutilfilestring-cve-2026-0846-63933a66e3d266c6 2026-10-29T21:52:04.000Z weekly 0.8 https://radar.offseq.com/threat/acronym-nltk-has-a-path-traversal-issue-cve-2026-0847-10130d9c35370663 2026-10-29T21:52:04.000Z weekly 0.8 https://radar.offseq.com/threat/acronym-nltk-versions-392-are-vulnerable-to-arbitrary-code-execution-due-to-improper-input-cve-2026-1f331f0b3facf7d6 2026-10-29T21:52:04.000Z weekly 0.9 https://radar.offseq.com/threat/nltk-wekaclassifier-passes-an-unvalidated-caller-controlled-model-path-to-the-weka-jvm-bypassing-bb4150a3f580aae8 2026-10-29T21:52:04.000Z weekly 0.8 https://radar.offseq.com/threat/acronym-natural-language-toolkit-nltk-redos-in-nltk-reviewscorpusreader-features-regex-cve-2026-12061-fbb9af569cb7ea60 2026-10-29T21:52:04.000Z weekly 0.8 https://radar.offseq.com/threat/acronym-natural-language-toolkit-nltk-path-traversal-in-nkjpcorpusreader-leads-to-arbitrary-file-read-597e583d09780426 2026-10-29T21:52:04.000Z weekly 0.8 https://radar.offseq.com/threat/acronym-natural-language-toolkit-nltk-has-path-traversal-in-framenetcorpusreaderframe-that-allows-6ee9fbb24025345d 2026-10-29T21:52:04.000Z weekly 0.8 https://radar.offseq.com/threat/acronym-natural-language-toolkit-nltk-dns-rebinding-ssrf-filter-bypass-in-nltkpathsecurlopen-726c50c7adac3160 2026-10-29T21:52:04.000Z weekly 0.8 https://radar.offseq.com/threat/acronym-nltk-stanford-wrapper-classes-execute-untrusted-jar-files-without-verification-cve-2026-12252-b6d43b9d3d3b1d7a 2026-10-29T21:52:04.000Z weekly 0.8 https://radar.offseq.com/threat/acronym-nltk-downloader-allows-cross-package-resource-and-model-poisoning-cve-2026-12261-59e639d308d6d8e1 2026-10-29T21:52:04.000Z weekly 0.7 https://radar.offseq.com/threat/acronym-nltk-network-url-validation-permits-ssrf-to-rfc-6598-shared-address-space-hosts-cve-2026-12372-fc8b8f6ab789cf77 2026-10-29T21:52:04.000Z weekly 0.7 https://radar.offseq.com/threat/nltk-uncontrolled-resource-consumption-in-recursivedescentparser-via-ambiguous-or-left-recursive-86811b0ed7c9f8e2 2026-10-30T12:34:53.989Z weekly 0.7 https://radar.offseq.com/threat/acronym-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-nltk-cve-20561e37a5f547a6 2026-10-30T12:34:50.496Z weekly 0.7 https://radar.offseq.com/threat/acronym-unauthenticated-remote-shutdown-in-nltkappwordnetapp-cve-2026-33231-53e1ca6b7c3622e7 2026-10-30T12:34:44.529Z weekly 0.8 https://radar.offseq.com/threat/acronym-nltk-has-a-downloader-path-traversal-vulnerability-afo-arbitrary-file-overwrite-cve-2026-33236-e5c7d4dcf7d2f9ac 2026-10-30T12:34:38.775Z weekly 0.8 https://radar.offseq.com/threat/acronym-natural-language-toolkit-nltk-url-encoded-path-traversal-in-nltkdataload-allows-arbitrary-0caf3197d79e2018 2026-10-30T12:34:34.615Z weekly 0.8 https://radar.offseq.com/threat/nltk-symlink-based-arbitrary-file-read-in-ipipancorpusreader-bypasses-nltkpathsec-entirely-cve-2026-7c9e7ab5db42eec1 2026-10-30T12:34:20.070Z weekly 0.7 https://radar.offseq.com/threat/nltk-symlink-based-sandbox-bypass-in-framenetcorpusreader-bypasses-the-fix-for-cve-2026-54292-cve-2026-244050481a598813 2026-10-30T12:34:12.849Z weekly 0.8 https://radar.offseq.com/threat/nltk-stable-framenet-and-nkjp-readers-parse-outside-root-xml-cve-2026-62385-cb97c44f5ec09370 2026-10-30T12:34:05.338Z weekly 0.7 https://radar.offseq.com/threat/nltk-default-enforcefalse-disables-all-pathsec-security-controls-cve-2026-62388-0c713227fb3e4a5d 2026-10-30T12:34:00.348Z weekly 0.8 https://radar.offseq.com/threat/nltk-ssrf-fail-open-in-validatenetworkurl-via-dns-resolution-failure-cve-2026-63311-ab2d00cc878fdbd3 2026-10-30T12:33:54.632Z weekly 0.7 https://radar.offseq.com/threat/nltk-streambackedcorpusview-bypasses-pathsecenforce-arbitrary-local-file-read-cve-2026-63312-cd8576febe7b187f 2026-10-30T12:33:47.770Z weekly 0.8 https://radar.offseq.com/threat/nltk-filesystempathpointeropen-sandbox-check-is-dead-code-arbitrary-file-read-via-file-protocol-38ec7cbcd8f4578e 2026-10-30T12:33:40.263Z weekly 0.7 https://radar.offseq.com/threat/acronym-natural-language-toolkit-nltk-has-unbounded-recursion-in-jsontaggeddecoderdecodeobj-may-cause-fb6c9c6cd6e69e28 2026-10-30T12:33:35.119Z weekly 0.7 https://radar.offseq.com/threat/nltk-symlink-escape-in-corpusreader-allows-arbitrary-local-file-read-outside-the-corpus-root-cve-2026-1ecc46d3107e8f20 2026-10-30T12:33:29.546Z weekly 0.7 https://radar.offseq.com/threat/acronym-nltk-allowlistunpickler-dotted-name-validation-bypass-allows-remote-code-execution-cve-2026-efe0c134cbc26617 2026-10-30T12:33:25.191Z weekly 0.8 https://radar.offseq.com/threat/acronym-nltk-crubadancorpusreader-path-traversal-allows-arbitrary-file-disclosure-cve-2026-71514-cf0dc91af16dbebd 2026-10-30T12:33:20.476Z weekly 0.7 https://radar.offseq.com/threat/acronym-nltk-tweettokenizer-vulnerable-to-denial-of-service-through-catastrophic-regex-backtracking-bae6b8a6066c58ed 2026-10-30T12:33:16.301Z weekly 0.8 https://radar.offseq.com/threat/nltk-uncontrolled-search-path-when-invoking-the-graphviz-dot-binary-cve-2026-78680-2aca5dcd27650938 2026-10-30T12:33:11.413Z weekly 0.8 https://radar.offseq.com/threat/nltk-entity-expansion-dos-billion-laughs-via-remaining-raw-elementtree-parses-cve-2026-78681-ade54c29cbe537ba 2026-10-30T12:33:06.342Z weekly 0.8 https://radar.offseq.com/threat/nltk-pathsec-ssrf-protection-can-be-bypassed-when-a-proxy-is-configured-cve-2026-78682-88b08acb0bfbdd22 2026-10-30T12:32:59.546Z weekly 0.8 https://radar.offseq.com/threat/nltk-unsafe-pickle-deserialization-in-transitionparser-allows-remote-code-execution-cve-2026-78683-c7c416243b784b7a 2026-10-30T12:32:54.691Z weekly 0.9 https://radar.offseq.com/threat/nltk-allowlisted-pickle-loaders-still-permit-code-execution-in-current-source-cve-2026-79657-274260d2a1668290 2026-10-30T12:32:47.623Z weekly 0.9 https://radar.offseq.com/threat/nltk-corpus-reader-sandbox-bypass-cve-2026-79674-5d9b2eb0278a9290 2026-10-30T12:32:39.823Z weekly 0.8 https://radar.offseq.com/threat/nltk-jvm-argument-injection-bypass-via-per-call-options-in-the-nltk-stanford-wrappers-incomplete-fix-of-f105cc6826df1a37 2026-10-30T12:32:34.728Z weekly 0.9 https://radar.offseq.com/threat/nltk-corpus-readers-follow-symlinks-outside-trusted-roots-despite-pathsec-enforcement-cve-2026-79676-4649744d38d01d45 2026-10-30T12:32:29.123Z weekly 0.8 https://radar.offseq.com/threat/nltk-redos-in-nltktexttextfindall-via-unvalidated-user-supplied-regular-expressions-cve-2026-80205-3fb850f45fbcbecc 2026-10-30T12:23:27.991Z weekly 0.8 https://radar.offseq.com/threat/nltk-redos-in-nltktgrep-via-unvalidated-user-supplied-regular-expressions-cve-2026-80206-660956125dde3502 2026-10-30T12:23:23.855Z weekly 0.8 https://radar.offseq.com/threat/nltk-quadratic-time-dos-in-porterstemmer-via-long-runs-of-y-cve-2026-81722-e1b9e04ec1691b5f 2026-10-30T12:23:20.036Z weekly 0.7 https://radar.offseq.com/threat/nltk-quadratic-cpu-exhaustion-in-xmlcorpusviewreadxmlfragment-cve-2026-81723-2c2f81d670c7a1bc 2026-10-30T12:23:15.825Z weekly 0.7 https://radar.offseq.com/threat/nltk-uncontrolled-recursion-in-nltkfeatstructfeatstructreader-causes-unhandled-recursionerror-dos-via-336ee59ee0288787 2026-10-30T12:23:11.093Z weekly 0.7 https://radar.offseq.com/threat/nltk-pl196xcorpusreader-has-quadratic-redos-on-malformed-tei-blocks-cve-2026-81725-7b4a0f6c2044d891 2026-10-30T12:23:07.269Z weekly 0.7 https://radar.offseq.com/threat/nltk-downloaderdownload-follows-hardlinks-and-overwrites-outside-root-files-cve-2026-81727-7f793db601b872e0 2026-10-30T12:23:02.868Z weekly 0.8 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-495fc8e9080a546d 2026-10-30T12:22:58.829Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-a8a66527e8b25091 2026-10-30T12:22:54.194Z weekly 0.7 https://radar.offseq.com/threat/xml2rfc-has-an-arbitrary-file-read-vulnerability-cve-2025-11058-6ed243bcf3d7a2b9 2026-10-30T12:17:57.183Z weekly 0.8 https://radar.offseq.com/threat/xml2rfc-is-vulnerable-to-arbitrary-file-reads-through-prepped-files-cve-2025-11059-c90e7265685fc13b 2026-10-30T12:17:53.105Z weekly 0.8 https://radar.offseq.com/threat/xml2rfc-has-file-inclusion-irregularities-bcf5b2dd762d827b 2026-10-30T12:22:48.922Z weekly 0.7 https://radar.offseq.com/threat/svg-with-embedded-scripts-can-lead-to-cross-site-scripting-attacks-in-xml2rfc-b84bcc852045c08f 2026-10-30T12:19:18.332Z weekly 0.8 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-2b5109b3f0b9683a 2026-10-30T12:19:15.061Z weekly 0.7 https://radar.offseq.com/threat/shallow-backup-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-f42b0ff7fa9556ca 2026-10-30T12:17:50.043Z weekly 0.8 https://radar.offseq.com/threat/shallow-backup-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-10dba081fd56e769 2026-10-30T12:17:46.010Z weekly 0.8 https://radar.offseq.com/threat/shallow-backup-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-6b07fd959607d71f 2026-10-30T12:17:40.685Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-ab884fa85361622d 2026-10-30T12:17:37.073Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-503cb0f294c30f0b 2026-10-30T12:19:10.697Z weekly 0.8 https://radar.offseq.com/threat/ansible10-requests-vulnerable-to-netrc-credentials-leak-via-malicious-urls-cve-2024-47081-6e2b7991a6173972 2026-10-30T12:19:06.119Z weekly 0.7 https://radar.offseq.com/threat/ansible10-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-8e1ce38a0334fed0 2026-10-30T12:17:31.365Z weekly 0.8 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-eb7cf3dab4543556 2026-10-30T12:17:27.552Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-79e0efcb1e01117a 2026-10-30T12:19:02.510Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-8b9e91f1bd4c7e2c 2026-10-30T12:18:59.146Z weekly 0.7 https://radar.offseq.com/threat/aws-google-auth-requests-vulnerable-to-netrc-credentials-leak-via-malicious-urls-cve-2024-47081-894f2eed87427721 2026-10-30T12:18:55.544Z weekly 0.7 https://radar.offseq.com/threat/aws-google-auth-filelock-has-a-toctou-race-condition-which-allows-symlink-attacks-during-lock-file-6f62470f9e8f1b6b 2026-10-30T12:18:51.325Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-evicts-a-fresh-lock-file-whose-watched-age-another-local-users-pre-dated-file-53a352be8578bc14 2026-10-30T12:18:46.451Z weekly 0.7 https://radar.offseq.com/threat/filelock-on-windows-an-oplock-on-a-soft-locks-marker-holds-softfilelockacquire-past-its-timeout-and-f710fda6fc51d902 2026-10-30T12:18:41.737Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-68891a6fe39605d9 2026-10-30T12:18:36.058Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-4f2253ae3a5adc1c 2026-10-30T12:18:29.761Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-da47475009bda85c 2026-10-30T12:18:24.597Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-0ab61017c3e8803d 2026-10-30T12:18:19.234Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-windows-acts-on-sqlite-side-files-another-local-user-places-beside-its-974c8b53cdbaacef 2026-10-30T12:18:13.796Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-break-restore-follows-a-swapped-in-symbolic-link-and-hard-links-a-file-of-63f4009f4ce07321 2026-10-30T12:18:07.512Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-5637ff039108d4e7 2026-10-30T12:06:58.464Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-9cdeb05b325cc8f3 2026-10-30T12:06:53.093Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-d928889b2dd3e04b 2026-10-30T12:06:47.755Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-bff355cd9b2912fd 2026-10-30T12:06:43.218Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-the-hard-link-route-deletes-any-directory-another-user-renames-onto-its-4730c31b858c0db0 2026-10-30T12:06:38.215Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-44ce0368acc2fe3e 2026-10-30T12:06:32.788Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-959685cd911738d5 2026-10-30T12:06:28.526Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-24251c2028e7ec47 2026-10-30T12:06:23.314Z weekly 0.8 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-81943738925cb2f4 2026-10-30T12:06:18.416Z weekly 0.7 https://radar.offseq.com/threat/aws-google-auth-filelock-time-of-check-time-of-use-toctou-symlink-vulnerability-in-softfilelock-cve-4bf8df48d1ae8470 2026-10-30T12:06:12.686Z weekly 0.7 https://radar.offseq.com/threat/aws-google-auth-soup-sieve-has-memory-exhaustion-via-large-comma-separated-selector-lists-cve-2026-7d44f8ce8247abac 2026-10-30T12:06:07.817Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-regular-expression-denial-of-service-redos-via-selector-parser-cve-2026-49477-65b0f7a1e4d62b74 2026-10-30T12:05:38.359Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-abe220fe595f8c70 2026-10-30T12:06:03.053Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-4269b8a892d678a9 2026-10-30T12:05:58.646Z weekly 0.7 https://radar.offseq.com/threat/aws-sso-util-requests-vulnerable-to-netrc-credentials-leak-via-malicious-urls-cve-2024-47081-70429897c0026fdb 2026-10-30T12:05:54.778Z weekly 0.7 https://radar.offseq.com/threat/keeper-commander-fpdf2-implicitly-loads-external-urls-and-local-image-paths-when-rendering-attacker-5aa1acb8940f13a1 2026-10-30T12:05:51.153Z weekly 0.7 https://radar.offseq.com/threat/fpdf2-exponential-svg-use-expansion-causes-cpu-and-memory-exhaustion-in-fpdfimage-cve-2026-114610-38a61f25f9f7cbd4 2026-10-30T12:05:45.734Z weekly 0.7 https://radar.offseq.com/threat/coconut-setuptools-vulnerable-to-command-injection-via-package-url-cve-2024-6345-0039a11a786e3887 2026-10-30T12:05:34.489Z weekly 0.8 https://radar.offseq.com/threat/coconut-setuptools-has-a-path-traversal-vulnerability-in-packageindexdownload-that-leads-to-arbitrary-567170c0fa006a5a 2026-10-30T12:05:30.710Z weekly 0.8 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-5435b31ddc2870f0 2026-10-30T12:04:09.779Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-21c11f29db1dcd39 2026-10-30T12:04:04.655Z weekly 0.7 https://radar.offseq.com/threat/aider-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-2f1ba665b1e7a76b 2026-10-30T12:04:01.050Z weekly 0.9 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-7b954dd64582c354 2026-10-30T12:03:57.013Z weekly 0.7 https://radar.offseq.com/threat/aider-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-lines-1190f5ab3d7aa0e3 2026-10-30T12:03:51.999Z weekly 0.8 https://radar.offseq.com/threat/aider-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-c4f6728336bb8bd2 2026-10-30T12:03:47.267Z weekly 0.8 https://radar.offseq.com/threat/aider-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-831926daf1db3f22 2026-10-30T12:02:59.341Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-3b2cec5f8a9bb325 2026-10-30T12:02:54.593Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-6591180c1e1b60d8 2026-10-30T12:03:42.480Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-aae522bdc8556850 2026-10-30T12:03:37.084Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-96a3eab402a051ea 2026-10-30T12:03:33.302Z weekly 0.7 https://radar.offseq.com/threat/aider-gitpython-validates-a-submodules-git-path-only-after-cloning-into-it-rce-cve-2026-114145-dd8f4330fa0c9c31 2026-10-30T12:02:48.392Z weekly 0.8 https://radar.offseq.com/threat/pillow-infinite-loop-in-mic-nframes-when-the-embedded-tiff-cve-2026-112390-b4870922f1f5075d 2026-10-30T12:02:43.099Z weekly 0.8 https://radar.offseq.com/threat/pillow-pdfparser-can-recurse-without-limit-in-getvalue-and-linearizepagetree-cve-2026-112391-b835099cb72fcbf3 2026-10-30T12:03:27.667Z weekly 0.7 https://radar.offseq.com/threat/pillow-null-dereference-in-imagingexpand-via-rank-filters-on-zero-size-images-cve-2026-112392-55c1683f72dffc97 2026-10-30T12:02:38.079Z weekly 0.8 https://radar.offseq.com/threat/pillow-heap-buffer-overflow-in-tiffwriteproc-when-saving-tiff-to-bytesio-cve-2026-112393-3d244515df465b17 2026-10-30T11:45:47.562Z weekly 0.9 https://radar.offseq.com/threat/pillow-p2l-and-p4l-decoders-may-read-1-to-3-bytes-past-the-passed-buffer-size-cve-2026-112394-1831973544d3c000 2026-10-30T11:45:42.865Z weekly 0.7 https://radar.offseq.com/threat/aider-pillow-tiled-tiff-decoder-reads-past-tile-buffer-in-copy4-unpackc1290-cve-2026-112395-1fc7a95070273199 2026-10-30T11:45:38.843Z weekly 0.7 https://radar.offseq.com/threat/pillow-heap-use-after-free-when-encoding-tiff-to-an-in-memory-buffer-cve-2026-112396-d7b10ea6e1d7f573 2026-10-30T11:45:34.947Z weekly 0.7 https://radar.offseq.com/threat/pillow-out-of-bounds-access-in-imagingmorph-on-a-zero-width-image-cve-2026-112397-6eac6c1306f0a1f7 2026-10-30T11:45:31.474Z weekly 0.8 https://radar.offseq.com/threat/pillow-apng-background-disposal-allocates-full-canvas-before-decompression-bomb-check-cve-2026-112399-8fec972aec787a2a 2026-10-30T11:45:27.897Z weekly 0.8 https://radar.offseq.com/threat/pillow-gif-seek-keeps-rejected-size-after-decompressionbomberror-allowing-dos-cve-2026-112400-d3f64322dec4783e 2026-10-30T11:45:23.387Z weekly 0.8 https://radar.offseq.com/threat/pillow-quadratic-gif-comment-concatenation-allows-dos-in-imageopen-cve-2026-112401-bf92ddcdb5f2aa97 2026-10-30T11:45:20.130Z weekly 0.7 https://radar.offseq.com/threat/pillow-double-free-in-imagingscaleaffine-on-calloc-failure-via-imagetransform-cve-2026-112402-85c5289a2e7163a2 2026-10-30T11:45:16.521Z weekly 0.8 https://radar.offseq.com/threat/pillow-heap-buffer-overflow-in-imagingjpegdecode-cve-2026-112403-201aeaeb541b0319 2026-10-30T11:45:12.882Z weekly 0.9 https://radar.offseq.com/threat/pillow-oob-read-in-tiffdecodec-tile-and-rgba-paths-leaks-heap-memory-into-pixels-cve-2026-112404-2fec12c69be9fc75 2026-10-30T11:45:09.315Z weekly 0.8 https://radar.offseq.com/threat/pillow-null-pointer-dereference-in-imagemerge-via-an-unvalidated-band-0-cve-2026-112405-7ea2c46910b7acfa 2026-10-30T11:45:04.381Z weekly 0.8 https://radar.offseq.com/threat/pillow-infinite-loop-in-pdfparserrewritepages-on-page-tree-parent-cycle-cve-2026-112406-9066ad9f32d20150 2026-10-30T11:44:42.148Z weekly 0.8 https://radar.offseq.com/threat/pillow-quadratic-gif-comment-copying-during-save-cve-2026-112891-5bdca194fe0e1768 2026-10-30T11:45:01.358Z weekly 0.7 https://radar.offseq.com/threat/pillow-msp-rle-decoder-expands-a-tiny-file-into-unbounded-memory-cve-2026-112892-94c714d60f990f37 2026-10-30T11:44:37.831Z weekly 0.8 https://radar.offseq.com/threat/pillow-invalid-free-in-freetype-glyph-rendering-when-a-stroker-is-active-cve-2026-112893-37e6f2dceb57707a 2026-10-30T11:44:34.648Z weekly 0.8 https://radar.offseq.com/threat/pillow-quadratic-time-dos-in-pdf-saveall-pdfparsernextobjectid-cve-2026-112894-0ede3d90bd291e78 2026-10-30T11:44:30.690Z weekly 0.8 https://radar.offseq.com/threat/pillow-unbounded-recursion-parsing-a-pdf-page-tree-or-trailer-chain-incomplete-fix-for-cve-2026-42310-93abfa141e07420f 2026-10-30T11:44:25.452Z weekly 0.8 https://radar.offseq.com/threat/pillow-tiff-encoder-colormap-plane-size-mismatch-causes-a-heap-out-of-bounds-read-cve-2026-112896-96b6c1b15956692b 2026-10-30T11:44:21.188Z weekly 0.8 https://radar.offseq.com/threat/pillow-tiffdecode-returns-uninitialized-memory-as-pixels-for-short-jpeg-strips-cve-2026-112897-c33a1346d1de1f78 2026-10-30T11:44:16.186Z weekly 0.8 https://radar.offseq.com/threat/pillow-imagequantize-with-empty-palette-leaks-uninitialized-stack-memory-cve-2026-112898-4f2c6cbc3bf2bb80 2026-10-30T11:44:58.279Z weekly 0.7 https://radar.offseq.com/threat/pillow-argument-injection-in-ghostscript-call-potentially-leading-into-rce-cve-2026-112900-765fa94e1a99aaf2 2026-10-30T11:44:12.464Z weekly 0.9 https://radar.offseq.com/threat/pillow-redos-in-xbmimageplugin-512-byte-file-stalls-imageopen-for-minutes-cve-2026-112901-85c9f238ea8f0032 2026-10-30T11:44:53.812Z weekly 0.7 https://radar.offseq.com/threat/pillow-arrow-export-leaks-stale-heap-memory-when-pillowalignment-1-cve-2026-114501-0e7c26183e600bbd 2026-10-30T11:44:49.982Z weekly 0.7 https://radar.offseq.com/threat/pillow-decompression-bomb-protection-bypass-via-multi-frame-seek-in-mpo-and-dcx-mpoimagefileseek-650b24d0251b2f3b 2026-10-30T11:44:46.983Z weekly 0.7 https://radar.offseq.com/threat/pillow-decompression-bomb-check-bypass-in-spiderimagepluginseek-leads-to-unbounded-allocation-dos-cve-475c72145dc395f7 2026-10-30T11:34:12.333Z weekly 0.8 https://radar.offseq.com/threat/pillow-bmp-rle-decoder-memory-amplification-dos-via-unbounded-delta-escape-absolute-mode-cve-2026-96638-964535d78e1a0c0b 2026-10-30T11:34:07.820Z weekly 0.7 https://radar.offseq.com/threat/aider-pillow-multi-frame-loaders-can-reuse-stale-native-image-storage-after-mode-transitions-cve-2026-0dd38b82f972c553 2026-10-30T11:34:03.252Z weekly 0.9 https://radar.offseq.com/threat/aider-pillow-pdf-append-accepts-malformed-shared-page-tree-dag-causing-resource-exhaustion-cve-2026-0ca98bc12ec2a37b 2026-10-30T11:33:58.690Z weekly 0.8 https://radar.offseq.com/threat/pillow-reachable-undefined-behavior-in-native-integer-operations-potentially-leading-to-denial-of-c820e68d17c49f28 2026-10-30T11:33:31.688Z weekly 0.7 https://radar.offseq.com/threat/pillow-tario-negative-size-field-causes-infinite-cpu-spin-loop-cve-2026-96642-f46133c8a4ba1c71 2026-10-30T11:33:27.395Z weekly 0.8 https://radar.offseq.com/threat/pillow-png-exif-chunk-makes-exif-parsing-run-in-quadratic-time-cve-2026-96643-db9dd4918ee2d6de 2026-10-30T11:32:43.225Z weekly 0.8 https://radar.offseq.com/threat/pillow-heap-buffer-overflow-writing-jpeg-comment-after-icc-profile-fills-buffer-cve-2026-96778-b3424ef00ac19b34 2026-10-30T11:32:39.398Z weekly 0.8 https://radar.offseq.com/threat/aider-litellm-vulnerable-to-reflected-xss-in-ssodebugcallback-920b771c26dd4b87 2026-10-30T11:33:23.695Z weekly 0.7 https://radar.offseq.com/threat/aqtinstall-scrapy-is-vulnerable-to-a-denial-of-service-dos-attack-due-to-flaws-in-brotli-decompression-7ad6ab72346682fe 2026-10-30T11:32:34.677Z weekly 0.8 https://radar.offseq.com/threat/brotli-out-of-bounds-write-in-the-brotli-decoder-node2shell-also-affects-the-pypi-brotli-package-cve-045b3c3ac350018f 2026-10-30T11:32:31.102Z weekly 0.9 https://radar.offseq.com/threat/py7zr-arbitrary-file-write-vulnerability-cve-2026-23879-fc4f12bce09be088 2026-10-30T11:32:26.594Z weekly 0.8 https://radar.offseq.com/threat/aqtinstall-soup-sieve-has-memory-exhaustion-via-large-comma-separated-selector-lists-cve-2026-49476-6e51c870c1040011 2026-10-30T11:32:23.151Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-regular-expression-denial-of-service-redos-via-selector-parser-cve-2026-49477-be7c5414af44cfbc 2026-10-30T11:32:18.909Z weekly 0.8 https://radar.offseq.com/threat/py7zr-decompression-bomb-zip-bomb-denial-of-service-via-unchecked-extraction-size-cve-2026-55195-d2694b74f49b34e0 2026-10-30T11:33:20.017Z weekly 0.7 https://radar.offseq.com/threat/py7zr-on2-algorithmic-complexity-dos-in-packinforead-cve-2026-55206-9d0c6847aea37d3a 2026-10-30T11:33:16.388Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-1ab8f23676846494 2026-10-30T11:33:12.593Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-7e854177b6bd980f 2026-10-30T11:33:08.276Z weekly 0.7 https://radar.offseq.com/threat/bbot-ansible-core-information-disclosure-flaw-cve-2024-0690-d5ab5a9a295cf006 2026-10-30T11:33:04.077Z weekly 0.7 https://radar.offseq.com/threat/bbot-ansible-core-vulnerable-to-content-protections-bypass-cve-2024-11079-3782fda8e63f4e4c 2026-10-30T11:32:59.823Z weekly 0.7 https://radar.offseq.com/threat/bbot-ansible-vulnerable-to-insertion-of-sensitive-information-into-log-file-cve-2024-8775-23d049b8a132901d 2026-10-30T11:31:46.043Z weekly 0.7 https://radar.offseq.com/threat/bbot-ansible-core-incorrect-authorization-vulnerability-cve-2024-9902-28c76859ac78d8ae 2026-10-30T11:31:41.360Z weekly 0.7 https://radar.offseq.com/threat/bbots-insufficient-sanitization-issues-in-gitdumperpy-can-lead-to-rce-cve-2025-10283-699ce1903d9090ee 2026-10-30T11:31:35.854Z weekly 0.9 https://radar.offseq.com/threat/bbots-various-issues-in-unarchivepy-can-cause-arbitrary-file-write-and-rce-cve-2025-10284-d54122d7fa7594be 2026-10-30T11:30:16.710Z weekly 0.9 https://radar.offseq.com/threat/ansible-core-argument-injection-in-ansible-galaxy-role-install-leads-to-arbitrary-code-execution-cve-cb7d55d9a8e109d6 2026-10-30T11:30:13.182Z weekly 0.8 https://radar.offseq.com/threat/streamlink-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-eb18ad3452bcd259 2026-10-30T11:30:05.706Z weekly 0.9 https://radar.offseq.com/threat/gitpython-repository-content-can-impersonate-the-git-directory-leading-to-arbitrary-code-execution-cve-0732cbaed8cdafae 2026-10-30T11:30:01.944Z weekly 0.8 https://radar.offseq.com/threat/bbot-deepdiff-class-pollution-in-delta-class-leading-to-dos-remote-code-execution-and-more-cve-2025-961d54b4714ec123 2026-10-30T11:29:56.196Z weekly 0.9 https://radar.offseq.com/threat/bbot-orjson-does-not-limit-recursion-for-deeply-nested-json-documents-cve-2025-67221-b0e4786d6dd16bb5 2026-10-30T11:29:51.148Z weekly 0.8 https://radar.offseq.com/threat/bbot-filelock-has-a-toctou-race-condition-which-allows-symlink-attacks-during-lock-file-creation-cve-5804776704846c21 2026-10-30T11:31:32.248Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-dd9fd7f615d72585 2026-10-30T11:31:27.047Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-6d96936b475c42ee 2026-10-30T11:31:22.622Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-739ab9ab78a3ba2a 2026-10-30T11:31:16.561Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-a7348f3bff53dc6b 2026-10-30T11:31:09.781Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-8333fd2e36b6c920 2026-10-30T11:31:03.831Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-c8ccd3172c954825 2026-10-30T11:30:58.205Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-23681b8ad06cf579 2026-10-30T11:30:51.788Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-380681b29afce308 2026-10-30T11:30:46.674Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-2d3bc36ad805d8c4 2026-10-30T11:30:42.577Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-3274fa5c41a14d2f 2026-10-30T11:30:37.765Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-ee09b35e38c9870a 2026-10-30T11:29:46.138Z weekly 0.8 https://radar.offseq.com/threat/bbot-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-c7c5efa25150977c 2026-10-30T11:29:41.018Z weekly 0.8 https://radar.offseq.com/threat/bbot-filelock-time-of-check-time-of-use-toctou-symlink-vulnerability-in-softfilelock-cve-2026-22701-92f41af6199b4237 2026-10-30T11:30:32.567Z weekly 0.7 https://radar.offseq.com/threat/bbot-soup-sieve-has-memory-exhaustion-via-large-comma-separated-selector-lists-cve-2026-49476-52bdf5e9ff1981ec 2026-10-30T11:16:23.075Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-regular-expression-denial-of-service-redos-via-selector-parser-cve-2026-49477-e50bec009b4f28b7 2026-10-30T11:16:18.749Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-0769b750e3fbf782 2026-10-30T11:30:27.273Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-e48a66c41ff26a87 2026-10-30T11:30:22.377Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-24d83fa3b0fb19c6 2026-10-30T11:17:27.324Z weekly 0.7 https://radar.offseq.com/threat/cve-bin-tool-aiohttp-server-lacks-an-initial-requestheader-timeout-cve-2026-111064-cc3a6f8fef87a359 2026-10-30T11:16:14.524Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-connector-pool-exhaustion-via-max-age-overflow-cve-2026-111065-7fe8b5bf4994f873 2026-10-30T11:17:24.325Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-file-descriptor-exhaustion-in-multipart-requests-cve-2026-111066-6b42c1295194f6d2 2026-10-30T11:16:11.549Z weekly 0.8 https://radar.offseq.com/threat/brotli-out-of-bounds-write-in-the-brotli-decoder-node2shell-also-affects-the-pypi-brotli-package-cve-81c7e0ded839c971 2026-10-30T11:16:08.262Z weekly 0.9 https://radar.offseq.com/threat/aiohttp-absolute-form-request-targets-can-spoof-requestscheme-cve-2026-111748-718253e24dbe7779 2026-10-30T11:17:21.184Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-cookie-from-subdomain-can-remove-host-only-scope-from-existing-cookies-cve-2026-111749-30d3fbfa597b01cd 2026-10-30T11:17:17.165Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-pure-python-parser-request-smuggling-cve-2026-111750-da44e616b0bd67ed 2026-10-30T11:17:14.016Z weekly 0.7 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-d8b103e5fe39b528 2026-10-30T11:17:10.764Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-d79193b44a321447 2026-10-30T11:17:06.344Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-4e1decafa7c2a5af 2026-10-30T11:17:01.940Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-multiple-instances-of-excessive-or-unbounded-memorycpu-use-9aa6260b161ec3fc 2026-10-30T11:16:03.938Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-58a3d78b26cade80 2026-10-30T11:16:57.292Z weekly 0.7 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-a58ba74b09ef11e9 2026-10-30T11:16:53.836Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-1e75b1c305f1d709 2026-10-30T11:16:49.244Z weekly 0.7 https://radar.offseq.com/threat/mcp-server-kubernetes-potential-security-issue-in-execinpod-tool-cve-2025-66404-5f373b2ba3cafe72 2026-10-30T11:15:52.837Z weekly 0.7 https://radar.offseq.com/threat/mcp-server-kubernetes-has-argument-injection-in-its-portforward-tool-via-space-splitting-cve-2026-39884-c3f38fb967ecff93 2026-10-30T11:15:49.546Z weekly 0.8 https://radar.offseq.com/threat/mcp-server-kubernetes-affected-by-tool-access-control-bypass-presentation-layer-filtering-without-e5ef7bd5d3cee83f 2026-10-30T11:15:45.343Z weekly 0.8 https://radar.offseq.com/threat/mcp-server-kubernetes-kubectl-generic-flag-injection-enables-kubernetes-bearer-token-exfiltration-cve-15fbbdbfe91ecd88 2026-10-30T11:15:41.911Z weekly 0.7 https://radar.offseq.com/threat/biber-textcsvxs-versions-before-165-for-perl-allow-memory-exhaustion-by-allocating-one-entry-per-index-25d0d13d2cea680d 2026-10-30T11:15:38.193Z weekly 0.8 https://radar.offseq.com/threat/biber-textcsvxs-versions-from-146-before-165-for-perl-have-a-use-after-free-of-bindcolumns-variables-b63e436c78ec5267 2026-10-30T11:15:34.588Z weekly 0.9 https://radar.offseq.com/threat/biber-textcsvxs-versions-before-165-for-perl-leak-the-parsed-fields-of-a-record-that-fails-to-parse-in-0802b6105e51ae5f 2026-10-30T11:15:30.836Z weekly 0.7 https://radar.offseq.com/threat/biber-textcsvxs-versions-before-165-for-perl-allow-quadratic-cpu-use-by-copying-the-unparsed-remainder-15939802f9c8e45e 2026-10-30T11:15:27.568Z weekly 0.8 https://radar.offseq.com/threat/biber-textcsvxs-versions-before-165-for-perl-drop-the-end-of-a-record-and-its-line-ending-when-a-utf-8-786463efc2cf70ce 2026-10-30T11:15:24.518Z weekly 0.9 https://radar.offseq.com/threat/biber-textcsvxs-versions-before-165-for-perl-allow-record-splitting-by-writing-strings-used-as-numbers-6c73325cd41a6e6c 2026-10-30T11:15:21.041Z weekly 0.9 https://radar.offseq.com/threat/biber-textcsvxs-versions-before-165-for-perl-read-before-the-start-of-an-all-blank-field-under-e47a3fb0ac4f39fc 2026-10-30T11:15:17.179Z weekly 0.8 https://radar.offseq.com/threat/biber-textcsvxs-versions-before-165-for-perl-return-a-0xff-byte-that-is-not-in-the-input-for-an-empty-9b3660e4eb8ec452 2026-10-30T11:15:12.216Z weekly 0.9 https://radar.offseq.com/threat/biber-mozillaca-versions-before-20261020-for-perl-provide-a-ca-certificate-bundle-containing-a-root-cfb98cbfaf56d4dd 2026-10-30T11:15:08.233Z weekly 0.8 https://radar.offseq.com/threat/defuddle-vulnerable-to-xss-via-unescaped-attribute-interpolation-in-site-extractors-cve-2026-61824-23e5f6d962bab63f 2026-10-30T11:15:04.403Z weekly 0.8 https://radar.offseq.com/threat/fdroidserver-untrusted-search-path-under-some-conditions-on-windows-allows-arbitrary-code-execution-3b1b0c22c65e926f 2026-10-30T11:15:00.759Z weekly 0.8 https://radar.offseq.com/threat/fdroidserver-gitpython-submodule-update-path-traversal-can-write-outside-the-repository-cve-2026-100689-851873f7d997d6cc 2026-10-30T11:14:55.907Z weekly 0.7 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-810c7aaebc751f31 2026-10-30T11:14:46.464Z weekly 0.8 https://radar.offseq.com/threat/fdroidserver-gitpython-reference-apis-has-a-path-traversal-vulnerability-that-allows-arbitrary-file-1fe832db0decb8f6 2026-10-30T11:14:41.255Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-git-long-option-prefix-abbreviation-bypass-of-cve-2026-42215-blocklist-b2d43669de6f593a 2026-10-30T11:14:36.233Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-section-name-injection-enables-arbitrary-config-directives-coresshcommand-rce-cve-78381feb40009f53 2026-10-30T11:14:29.926Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitarchiveoptions-denylist-omits-add-file-add-virtual-file-enabling-008dce79785a0d08 2026-10-30T11:14:50.912Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-indexfilecheckout-and-tagreferencecreate-enables-2c3adfd4116fb8c2 2026-10-30T11:14:24.999Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitcloneoptions-denylist-omits-template-enabling-arbitrary-command-113d99540ef7154b 2026-10-30T11:14:20.551Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unguarded-git-read-tree-option-forwarding-in-indexfilefromtreeresetmergetree-enables-7d01b1c925a8fcad 2026-10-30T11:14:16.799Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-local-file-content-disclosure-via-include-directive-in-untrusted-gitmodules-a5dfae38b8c3d947 2026-10-30T11:14:11.310Z weekly 0.8 https://radar.offseq.com/threat/gitpython-dormant-multi-line-git-config-values-are-corrupted-into-live-injected-directives-eg-cve-2026-0dc0c292c2a87878 2026-10-30T11:03:08.234Z weekly 0.9 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitrevisionoptions-denylist-omits-contents-s-enabling-arbitrary-file-read-42377cd4e4e755c7 2026-10-30T11:03:03.589Z weekly 0.7 https://radar.offseq.com/threat/gitpython-tagreferencecreate-positional-reference-bypasses-kwargs-only-file-guard-enabling-arbitrary-42e79084bf4f212b 2026-10-30T11:02:57.946Z weekly 0.7 https://radar.offseq.com/threat/certbot-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-f7bf88d3b6ed07a2 2026-10-30T11:02:53.218Z weekly 0.9 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-fdf807ae8da4f3f0 2026-10-30T11:02:48.353Z weekly 0.7 https://radar.offseq.com/threat/fdroidserver-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-9995085efd5ba8b5 2026-10-30T11:02:43.987Z weekly 0.8 https://radar.offseq.com/threat/fdroidserver-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-a8f7f29039b6f198 2026-10-30T11:02:40.014Z weekly 0.8 https://radar.offseq.com/threat/fdroidserver-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-e65961f8bac8ece5 2026-10-30T11:02:34.098Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-2ad2d923b56ac8f7 2026-10-30T11:02:29.348Z weekly 0.8 https://radar.offseq.com/threat/fdroidserver-gitpython-validates-a-submodules-git-path-only-after-cloning-into-it-rce-cve-2026-114145-b50874a87faef992 2026-10-30T11:02:23.395Z weekly 0.8 https://radar.offseq.com/threat/fdroidserver-gitpython-has-command-injection-via-git-options-bypass-cve-2026-42215-ee258778c0f00fbd 2026-10-30T11:02:17.955Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-option-check-validates-multioptions-before-shlexsplit-transformation-cve-2026-42284-4d7fa10299a5885d 2026-10-30T11:02:13.619Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwritersetvalue-enables-rce-via-corehookspath-cve-2026-44244-9762a2206ea1a44c 2026-10-30T11:02:09.766Z weekly 0.8 https://radar.offseq.com/threat/fdroidserver-paramiko-rsakeypy-allows-the-sha-1-algorithm-cve-2026-44405-f6ea326c562ac91d 2026-10-30T11:02:04.259Z weekly 0.7 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-ospathexpandvars-on-repoclonefrom-url-cve-2026-67322-6dcaf501b9952384 2026-10-30T11:02:00.202Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-unguarded-git-options-in-repoarchive-gitlsremote-and-arbitrary-file-3c237c99614731de 2026-10-30T11:01:45.107Z weekly 0.8 https://radar.offseq.com/threat/fdroidserver-gitpython-unsafe-clone-option-gate-bypass-through-joined-short-options-cve-2026-67324-ef408cf3f8587ba0 2026-10-30T11:01:40.618Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwriter-section-parameter-bypasses-cve-2026-42215-patch-enabling-9c2c55132dd9d52a 2026-10-30T11:01:34.959Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-truncation-via-git-rev-list-output-argument-injection-in-unguarded-commitcount-c6129eed41d52721 2026-10-30T11:01:54.356Z weekly 0.7 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-repocreateremote-remoteadd-url-incomplete-fix-of-6e489d7b8c15e90f 2026-10-30T11:01:30.380Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-overwrite-via-git-diff-output-argument-injection-in-diffablediff-key-and-182932f67df08a7f 2026-10-30T11:01:25.369Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-single-character-kwarg-value-token-smuggling-enables-6d5c850917eaa1e2 2026-10-30T11:01:21.126Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-pathspec-from-file-in-indexfileremove-and-headcheckout-cve-2026-76217-4758119640ced75b 2026-10-30T11:01:49.836Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-repoinit-enables-arbitrary-command-execution-via-template-7dda0c372256cfe8 2026-10-30T11:01:15.981Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-splitsinglecharoptionsfalse-short-option-token-smuggling-0fce656de9ca911c 2026-10-30T11:01:05.219Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-option-name-injection-via-whitespace-bypasses-name-validator-enabling-forged-4567c797aefbe50d 2026-10-30T11:00:59.029Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-git-repository-creation-outside-the-working-tree-via-unvalidated-gitmodules-d4150e8574e4d32c 2026-10-30T11:00:55.081Z weekly 0.8 https://radar.offseq.com/threat/gitpython-clonefromclone-omit-separate-git-dir-from-unsafegitcloneoptions-enabling-arbitrary-8cd6c92631425b3d 2026-10-30T10:59:42.021Z weekly 0.8 https://radar.offseq.com/threat/gitpython-denial-of-service-via-catastrophic-backtracking-redos-in-actornameemailregex-commit-4b667c20dcde7ca3 2026-10-30T10:59:37.566Z weekly 0.8 https://radar.offseq.com/threat/git-annex-checksum-exposure-to-encrypted-special-remotes-0e67fcb813c45632 2026-10-30T11:00:50.472Z weekly 0.7 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-7ed4925e84716e51 2026-10-30T10:59:32.793Z weekly 0.8 https://radar.offseq.com/threat/messagepack-for-python-out-of-bounds-read-crash-on-unpacker-reuse-after-a-caught-error-cve-2026-57585-c028e0e8deab998c 2026-10-30T10:59:27.874Z weekly 0.8 https://radar.offseq.com/threat/magic-wormhole-autobahn-python-permessage-deflate-bypasses-maxmessagepayloadsize-after-inflation-cve-3148ae786e9089e1 2026-10-30T11:00:47.302Z weekly 0.7 https://radar.offseq.com/threat/get-iplayer-mojolicious-versions-from-0999922-for-perl-uses-a-hard-coded-string-or-the-applications-84200046e7a4ab76 2026-10-30T10:59:24.344Z weekly 0.8 https://radar.offseq.com/threat/get-iplayer-mojojson-versions-before-947-for-perl-allow-memory-exhaustion-via-unbounded-recursion-in-ee4a9a118f342f68 2026-10-30T11:00:43.324Z weekly 0.7 https://radar.offseq.com/threat/get-iplayer-mojolicious-versions-from-459-before-948-for-perl-expose-a-stable-representation-of-the-34a8170468842c8a 2026-10-30T10:59:21.302Z weekly 0.9 https://radar.offseq.com/threat/dnsviz-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-f54bc09da3a6f939 2026-10-30T10:59:15.086Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-28b62135d55c06dd 2026-10-30T11:00:38.759Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-b13a4028fc88e06e 2026-10-30T11:00:34.332Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-5eea592cd5619d7f 2026-10-30T11:00:29.386Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-09ac19ca1956973a 2026-10-30T11:00:23.837Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-0d3f38c10485fe6f 2026-10-30T11:00:18.403Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-f15fd3b6250aa66c 2026-10-30T11:00:13.161Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-db3101da5584f5f9 2026-10-30T11:00:08.596Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-1fae4e7662391239 2026-10-30T11:00:02.738Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-7be3171e96738e21 2026-10-30T10:59:57.967Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-cc4634274b233f37 2026-10-30T10:59:53.764Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-97201e7de09c92d0 2026-10-30T10:59:47.722Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-444a21f89a70fabd 2026-10-30T10:59:11.915Z weekly 0.8 https://radar.offseq.com/threat/brotli-out-of-bounds-write-in-the-brotli-decoder-node2shell-also-affects-the-pypi-brotli-package-cve-ccd12f2c117fe79e 2026-10-30T10:47:38.069Z weekly 0.9 https://radar.offseq.com/threat/bzt-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-c7b752481217b889 2026-10-30T10:47:34.336Z weekly 0.9 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-4daf6ed52aa9b63d 2026-10-30T10:47:30.161Z weekly 0.7 https://radar.offseq.com/threat/multidict-reference-leak-in-cimultidictmultidict-items-view-union-and-subtraction-cve-2026-104874-de2e6008a60c0097 2026-10-30T10:47:27.579Z weekly 0.7 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-746d992c3233fd00 2026-10-30T10:47:23.809Z weekly 0.8 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-3e7ca95796eb0cf9 2026-10-30T10:47:19.351Z weekly 0.7 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-9b0a3a594a0f3a81 2026-10-30T10:47:13.107Z weekly 0.8 https://radar.offseq.com/threat/twisted-denial-of-service-in-the-twisted-imap4-server-via-a-negative-literal-size-in-search-cve-2026-9a439d3f38bb1c3a 2026-10-30T10:47:08.579Z weekly 0.7 https://radar.offseq.com/threat/twisted-unauthenticated-remote-denial-of-service-in-the-twisted-words-domish-xml-element-stream-via-an-bca1d7fda15096d8 2026-10-30T10:47:05.234Z weekly 0.8 https://radar.offseq.com/threat/twisted-unauthenticated-remote-denial-of-service-in-the-twisted-irc-server-via-an-unbounded-line-buffer-f75a440f6da91416 2026-10-30T10:47:01.300Z weekly 0.8 https://radar.offseq.com/threat/twisted-unauthenticated-remote-denial-of-service-in-the-twisted-conch-telnet-transport-via-an-unbounded-a9deed88d88427ee 2026-10-30T10:46:55.231Z weekly 0.8 https://radar.offseq.com/threat/twisted-http-request-smuggling-in-twistedweb-via-a-bare-cr-or-lf-in-a-header-value-cve-2026-115877-a4e850a3e0ef374a 2026-10-30T10:46:51.022Z weekly 0.7 https://radar.offseq.com/threat/autobahn-python-permessage-brotli-inflates-a-whole-frame-before-maxmessagepayloadsize-is-checked-683cee086b308cb7 2026-10-30T10:46:45.837Z weekly 0.7 https://radar.offseq.com/threat/messagepack-for-python-out-of-bounds-read-crash-on-unpacker-reuse-after-a-caught-error-cve-2026-57585-668e1e223fd2a3af 2026-10-30T10:46:41.655Z weekly 0.8 https://radar.offseq.com/threat/twisted-dns-response-spoofing-in-twistednames-due-to-missing-source-address-validation-cve-2026-83813-3d47d8177a086f39 2026-10-30T10:46:37.725Z weekly 0.7 https://radar.offseq.com/threat/twisted-unauthenticated-remote-denial-of-service-in-the-twisted-http2-server-via-rapid-stream-reset-76e3e8a464e65c33 2026-10-30T10:46:32.779Z weekly 0.8 https://radar.offseq.com/threat/gdbgui-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-0d64753e925d22d4 2026-10-30T10:46:25.846Z weekly 0.9 https://radar.offseq.com/threat/brotli-out-of-bounds-write-in-the-brotli-decoder-node2shell-also-affects-the-pypi-brotli-package-cve-a53212cc598ffba9 2026-10-30T10:46:16.442Z weekly 0.9 https://radar.offseq.com/threat/gdbgui-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-f428d5a807304252 2026-10-30T10:46:12.711Z weekly 0.8 https://radar.offseq.com/threat/fastmcp-oauth-proxy-token-reuse-across-mcp-servers-cve-2025-69196-bf5758246fcaa2a8 2026-10-30T10:46:08.748Z weekly 0.8 https://radar.offseq.com/threat/fastmcp-starlette-vulnerable-to-on2-dos-via-range-header-merging-in-starletteresponsesfileresponse-a6ea60a8e8e5d1a7 2026-10-30T10:45:49.249Z weekly 0.8 https://radar.offseq.com/threat/fastmcp-vulnerable-to-reflected-xss-in-clients-callback-page-cve-2025-62800-e59b1803b91d7191 2026-10-30T10:45:45.768Z weekly 0.7 https://radar.offseq.com/threat/fastmcp-vulnerable-to-windows-command-injection-in-fastmcp-cursor-installer-via-servername-cve-2025-d975906942765447 2026-10-30T10:45:42.127Z weekly 0.7 https://radar.offseq.com/threat/fastmcp-has-a-command-injection-vulnerability-gemini-cli-cve-2025-64340-597b0e0e3d377265 2026-10-30T10:45:38.628Z weekly 0.7 https://radar.offseq.com/threat/fastmcp-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-9419ff4aaa688b42 2026-10-30T10:45:34.415Z weekly 0.8 https://radar.offseq.com/threat/authlib-issecuretransport-loopback-exemption-can-be-bypassed-with-a-userinfo-component-allowing-3b3ae2d71d7e5ddc 2026-10-30T10:45:31.217Z weekly 0.7 https://radar.offseq.com/threat/fastmcp-authlib-incomplete-algorithm-confusion-fix-permits-hmac-forgery-with-prefixed-public-keys-cve-61dcd77d4127516c 2026-10-30T10:45:26.444Z weekly 0.8 https://radar.offseq.com/threat/fastmcp-authlib-accepts-an-empty-hmac-key-allowing-jwsjwt-signature-forgery-hs256hs384hs512-cve-2026-b3cd14b9d659e25b 2026-10-30T10:45:20.536Z weekly 0.8 https://radar.offseq.com/threat/authlib-id-token-can-disable-its-own-nonce-validation-via-the-noncesupported-claim-cve-2026-114617-17faf62519875b53 2026-10-30T10:16:18.050Z weekly 0.7 https://radar.offseq.com/threat/authlib-default-jwt-bearer-grant-accepts-assertions-for-the-wrong-audience-cve-2026-114618-0d35e4aa825a6833 2026-10-30T10:16:12.575Z weekly 0.7 https://radar.offseq.com/threat/authlib-openid-implicit-grant-checks-raw-scope-instead-of-allowed-scope-before-issuing-id-tokens-cve-8b3ca61a0e6f66df 2026-10-30T10:16:07.342Z weekly 0.7 https://radar.offseq.com/threat/authlib-unvalidated-requesturi-fetch-in-jwt-secured-authorization-request-jar-leading-to-ssrf-cve-2026-c15101e8890150dc 2026-10-30T10:16:01.362Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-f159189e9bf77f92 2026-10-30T10:15:55.264Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-8c8f147194a3a170 2026-10-30T10:15:50.338Z weekly 0.7 https://radar.offseq.com/threat/fastmcp-missing-consent-verification-in-oauth-proxy-callback-facilitates-confused-deputy-2e86edf77da563d3 2026-10-30T10:15:43.792Z weekly 0.8 https://radar.offseq.com/threat/authlib-jws-jwk-header-injection-signature-verification-bypass-cve-2026-27962-406a6a013b918e98 2026-10-30T10:15:37.103Z weekly 0.9 https://radar.offseq.com/threat/fastmcp-openapi-provider-has-an-ssrf-path-traversal-vulnerability-cve-2026-32871-02ac6f6945909058 2026-10-30T10:15:26.557Z weekly 0.9 https://radar.offseq.com/threat/fastmcp-starlette-has-missing-host-header-validation-that-poisons-requesturlpath-bypassing-path-based-a67b8fa0cd9c67ba 2026-10-30T10:15:20.260Z weekly 0.7 https://radar.offseq.com/threat/starlette-arbitrary-http-method-dispatched-to-httpendpoint-attributes-via-getattr-cve-2026-48817-967b8fa582ba4b40 2026-10-30T10:15:13.817Z weekly 0.7 https://radar.offseq.com/threat/starlette-unvalidated-request-path-concatenated-into-authority-poisons-requesturlhostname-cve-2026-837ab790f8ced6a4 2026-10-30T10:15:10.022Z weekly 0.7 https://radar.offseq.com/threat/starlette-requestform-limits-silently-ignored-for-applicationx-www-form-urlencoded-enable-dos-cve-2026-e595f7357a7db866 2026-10-30T10:14:44.726Z weekly 0.8 https://radar.offseq.com/threat/authlib-empty-signatures-validation-in-jws-json-deserialization-cve-2026-96760-b024a7c810767ba9 2026-10-30T10:14:39.393Z weekly 0.9 https://radar.offseq.com/threat/fastmcp-post-transform-component-authorization-is-skipped-on-direct-calls-f34a5dd63cec4460 2026-10-30T10:15:05.063Z weekly 0.7 https://radar.offseq.com/threat/fastmcp-auth-integration-allows-for-confused-deputy-account-takeover-aa7e424c38303cac 2026-10-30T10:14:35.103Z weekly 0.8 https://radar.offseq.com/threat/fastmcp-mcp-client-wrappers-construct-m2m-oauth-providers-without-issuer-binding-client-secret-d732d59d91c8edf5 2026-10-30T10:15:01.079Z weekly 0.7 https://radar.offseq.com/threat/mentat-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-347c4f159ccd220b 2026-10-30T10:14:30.864Z weekly 0.9 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-f1588437a507efd5 2026-10-30T10:14:56.779Z weekly 0.7 https://radar.offseq.com/threat/mentat-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-lines-d7f3d331ab3d957b 2026-10-30T10:14:26.666Z weekly 0.8 https://radar.offseq.com/threat/mentat-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-28644234ef9b2e4c 2026-10-30T10:14:22.497Z weekly 0.8 https://radar.offseq.com/threat/mentat-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-f78eb28e1458d01a 2026-10-30T10:14:15.456Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-e18859c61292b928 2026-10-30T10:14:10.718Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-fb6c4593c31ac2c2 2026-10-30T09:15:43.757Z weekly 0.8 https://radar.offseq.com/threat/mycli-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-90dad0f72655f9f6 2026-10-30T09:14:39.022Z weekly 0.9 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-848f8d4dd54671ac 2026-10-30T09:15:39.544Z weekly 0.7 https://radar.offseq.com/threat/hermes-agent-aiohttp-server-lacks-an-initial-requestheader-timeout-cve-2026-111064-f947fd9b52711ed4 2026-10-30T09:14:35.201Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-connector-pool-exhaustion-via-max-age-overflow-cve-2026-111065-c398d18feff20107 2026-10-30T09:15:36.589Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-file-descriptor-exhaustion-in-multipart-requests-cve-2026-111066-68fd55156c15a93f 2026-10-30T09:14:31.661Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-absolute-form-request-targets-can-spoof-requestscheme-cve-2026-111748-532fcf51137959cb 2026-10-30T09:15:32.957Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-cookie-from-subdomain-can-remove-host-only-scope-from-existing-cookies-cve-2026-111749-7434bae300c94931 2026-10-30T09:15:29.559Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-pure-python-parser-request-smuggling-cve-2026-111750-62d117d9457f1935 2026-10-30T09:15:26.225Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-multiple-instances-of-excessive-or-unbounded-memorycpu-use-55cb5106e6231afd 2026-10-30T09:14:28.513Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-0a93fba079bdecea 2026-10-30T09:15:22.781Z weekly 0.7 https://radar.offseq.com/threat/omnara-authlib-incomplete-algorithm-confusion-fix-permits-hmac-forgery-with-prefixed-public-keys-cve-a5f714147bf99481 2026-10-30T09:14:24.461Z weekly 0.8 https://radar.offseq.com/threat/omnara-authlib-accepts-an-empty-hmac-key-allowing-jwsjwt-signature-forgery-hs256hs384hs512-cve-2026-13b156bb8e15bae4 2026-10-30T09:14:18.501Z weekly 0.8 https://radar.offseq.com/threat/authlib-id-token-can-disable-its-own-nonce-validation-via-the-noncesupported-claim-cve-2026-114617-3403eda229536819 2026-10-30T09:15:19.347Z weekly 0.7 https://radar.offseq.com/threat/authlib-default-jwt-bearer-grant-accepts-assertions-for-the-wrong-audience-cve-2026-114618-8767a7fb5898a8e5 2026-10-30T09:15:14.916Z weekly 0.7 https://radar.offseq.com/threat/authlib-empty-signatures-validation-in-jws-json-deserialization-cve-2026-96760-894cb30e6407b88e 2026-10-30T09:14:14.038Z weekly 0.9 https://radar.offseq.com/threat/jupyterlab-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-9bb52aa13d639652 2026-10-30T09:14:09.448Z weekly 0.9 https://radar.offseq.com/threat/jupyterlab-mistune-has-a-redos-in-linktitlere-that-allows-denial-of-service-via-crafted-markdown-input-fdb64f8e2946a205 2026-10-30T09:01:26.898Z weekly 0.8 https://radar.offseq.com/threat/jupyterlab-nbconvert-has-an-arbitrary-file-write-via-path-traversal-in-cell-attachment-filenames-cve-563fa55d5f95569d 2026-10-30T09:15:11.112Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-nbconvert-has-an-arbitrary-file-read-via-path-traversal-in-htmlexporter-image-embedding-cve-71266c6b7846ba13 2026-10-30T09:15:06.796Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-mistune-math-plugin-has-an-xss-escape-bypass-cve-2026-44708-a9fcc85fd9b6188f 2026-10-30T09:15:02.553Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-mistune-has-xss-via-unescaped-figclassfigwidth-in-figure-directive-cve-2026-44896-ed1207ccdd669cca 2026-10-30T09:14:58.525Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-mistune-heading-id-attribute-has-injection-xss-cve-2026-44897-50081bedbf4c83f7 2026-10-30T09:14:54.174Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-mistune-toc-anchor-injection-xss-cve-2026-44898-fb136855ed7dd45f 2026-10-30T09:14:50.402Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-mistune-image-directive-css-injection-vulnerability-cve-2026-44899-ae8a131f250f832c 2026-10-30T09:14:46.047Z weekly 0.7 https://radar.offseq.com/threat/mistune-potential-dos-via-quadratic-time-parsing-in-parselinktext-cve-2026-49851-316523ff10b40531 2026-10-30T09:01:22.444Z weekly 0.8 https://radar.offseq.com/threat/mistune-pluginsformatting-quadratic-time-parsing-on-long-runs-of-x-x-and-x-markers-9523fb9a72bcc150 2026-10-30T09:01:16.432Z weekly 0.8 https://radar.offseq.com/threat/mistune-xss-via-percent-encoded-javascript-uri-bypass-in-safeurl-cve-2026-59923-bea239fc1405a9ab 2026-10-30T09:14:42.487Z weekly 0.7 https://radar.offseq.com/threat/mistune-arbitrary-file-read-via-include-directive-path-traversal-cve-2026-59924-1e025c5ed7098e4c 2026-10-30T09:02:46.764Z weekly 0.7 https://radar.offseq.com/threat/mistune-inlineparser-quadratic-time-parsing-on-long-runs-of-x-and-x-emphasis-pairs-cve-2026-59925-647b5a7c78209c16 2026-10-30T09:01:12.052Z weekly 0.8 https://radar.offseq.com/threat/mistune-xss-via-unescaped-class-option-in-admonition-directive-cve-2026-59926-2f5a498accf5246a 2026-10-30T09:02:42.619Z weekly 0.7 https://radar.offseq.com/threat/mistune-directivesinclude-mutual-cve-2026-59927-6453c501d66b4c11 2026-10-30T09:02:38.778Z weekly 0.7 https://radar.offseq.com/threat/mistune-blockparser-quadratic-time-parsing-on-long-lists-of-repeated-reference-link-definitions-cve-bfb5d0e51961616f 2026-10-30T09:01:07.726Z weekly 0.8 https://radar.offseq.com/threat/mistune-renderershtmlsafeurl-harmfulprotocols-list-misses-legacy-and-chained-schemes-that-historically-67d170a98d740d77 2026-10-30T09:02:33.708Z weekly 0.7 https://radar.offseq.com/threat/mistune-toc-tableofcontents-directive-heading-ids-use-predictable-tocn-numbering-with-no-slugification-31fed20e6a76a391 2026-10-30T09:02:29.237Z weekly 0.7 https://radar.offseq.com/threat/mistune-denial-of-service-recursionerror-via-excessive-emphasis-markers-in-markdown-cve-2026-76098-ade2d06678374c12 2026-10-30T09:01:03.470Z weekly 0.8 https://radar.offseq.com/threat/pyjwkclient-missing-scheme-allowlist-enables-cve-2024-21643-class-ssrf-token-forgery-via-file-ftp-data-5b7287171f842db6 2026-10-30T09:02:25.039Z weekly 0.7 https://radar.offseq.com/threat/pyjwt-algorithm-allow-list-bypass-when-decoding-with-pyjwk-pyjwkclient-keys-cve-2026-48523-65ebe05064bdaf16 2026-10-30T09:02:20.383Z weekly 0.7 https://radar.offseq.com/threat/hermes-agent-pyjwkclient-unbounded-jwks-endpoint-requests-via-attacker-controlled-kid-values-dos-cve-9e37e27df386c0f1 2026-10-30T09:02:15.837Z weekly 0.7 https://radar.offseq.com/threat/pyjwt-unauthenticated-dos-via-unbounded-base64url-decoding-of-unused-payload-segment-in-b64false-eab01407d2ff88af 2026-10-30T09:02:11.847Z weekly 0.7 https://radar.offseq.com/threat/pyjwt-public-key-jwk-accepted-as-hmac-secret-enables-forged-hs256-tokens-when-mixed-families-are-d9d3a44530f1cb45 2026-10-30T09:00:59.081Z weekly 0.8 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-6a1f2e9970eeab59 2026-10-30T09:02:07.570Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-2edf3e2634eb017c 2026-10-30T09:02:02.755Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-601dae12f01d0c85 2026-10-30T09:01:58.077Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-8a40e4271949d3f1 2026-10-30T09:01:52.220Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-902a13ac3dc91b19 2026-10-30T09:01:46.374Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-1c270f8aed290408 2026-10-30T09:01:40.004Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-7b9f8298bfdc9e52 2026-10-30T09:01:34.688Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-c3620c8b2faf021d 2026-10-30T09:00:48.708Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-4d49679cf0548338 2026-10-30T09:00:44.722Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-e2a11bcc45bca0bc 2026-10-30T09:00:40.234Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-4d0bcf830b7b1df3 2026-10-30T09:00:34.209Z weekly 0.7 https://radar.offseq.com/threat/glances-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-0f7ecee213a4777a 2026-10-30T09:00:29.058Z weekly 0.9 https://radar.offseq.com/threat/jupyterlab-tornado-has-an-http-cookie-parsing-dos-vulnerability-cve-2024-52804-9791763a0811c594 2026-10-30T09:00:24.441Z weekly 0.8 https://radar.offseq.com/threat/jupyterlab-tornado-vulnerable-to-excessive-logging-caused-by-malformed-multipart-form-data-cve-2025-e029ebf554d2087c 2026-10-30T09:00:20.950Z weekly 0.8 https://radar.offseq.com/threat/jupyterlab-nbconvert-has-an-uncontrolled-search-path-that-leads-to-unauthorized-code-execution-on-82931730c3f7bf36 2026-10-30T09:00:17.768Z weekly 0.8 https://radar.offseq.com/threat/jupyterlab-tornado-vulnerable-to-header-injection-and-xss-via-reason-argument-cve-2025-67724-f630bd300ec8453e 2026-10-30T09:00:14.103Z weekly 0.7 https://radar.offseq.com/threat/tornado-quadratic-dos-via-repeated-header-coalescing-cve-2025-67725-3fae9baf43bfa70d 2026-10-30T08:59:37.468Z weekly 0.8 https://radar.offseq.com/threat/tornado-quadratic-dos-via-crafted-multipart-parameters-cve-2025-67726-ab71e39fb4bb29f9 2026-10-30T08:59:33.743Z weekly 0.8 https://radar.offseq.com/threat/tornado-unbounded-query-string-argument-count-allows-event-loop-stalling-dos-cve-2026-103261-5ca83f12b33f36d6 2026-10-30T09:00:09.096Z weekly 0.7 https://radar.offseq.com/threat/tornado-curlasynchttpclient-enforces-no-response-size-limit-decompression-bomb-drives-unbounded-memory-89e83acc22830982 2026-10-30T08:59:30.476Z weekly 0.8 https://radar.offseq.com/threat/tornado-staticfilehandler-follows-symlinks-outside-static-root-path-traversal-cve-2026-103263-046cd4b4087dc3e1 2026-10-30T08:59:25.358Z weekly 0.8 https://radar.offseq.com/threat/nbconvert-arbitrary-file-write-through-path-traversal-in-cell-output-filenames-when-exporting-to-md-dcef217343d9f8bf 2026-10-30T08:59:21.052Z weekly 0.8 https://radar.offseq.com/threat/tornado-event-loop-blocking-and-excess-memory-use-from-chunked-bodies-with-many-small-chunks-cve-2026-5ab53dd3b792dbf1 2026-10-30T09:00:04.374Z weekly 0.7 https://radar.offseq.com/threat/tornado-quadratic-cpu-usage-when-parsing-http-headers-with-line-folding-cve-2026-116577-2c427dcd4d28068a 2026-10-30T09:00:00.161Z weekly 0.7 https://radar.offseq.com/threat/tornado-open-redirect-in-redirecthandler-via-protocol-relative-urls-cve-2026-116578-f107de7436b70f4c 2026-10-30T08:59:56.228Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-tornado-is-vulnerable-to-dos-due-to-too-many-multipart-parts-cve-2026-31958-458dac66d9b37691 2026-10-30T08:59:17.501Z weekly 0.8 https://radar.offseq.com/threat/jupyterlab-tornado-has-incomplete-validation-of-cookie-attributes-cve-2026-35536-7c4411d0f4f38f73 2026-10-30T08:59:52.414Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-soup-sieve-has-memory-exhaustion-via-large-comma-separated-selector-lists-cve-2026-49476-0b231bfbfdceeeef 2026-10-30T08:59:14.172Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-regular-expression-denial-of-service-redos-via-selector-parser-cve-2026-49477-adc9cd195bb062b7 2026-10-30T08:59:09.987Z weekly 0.8 https://radar.offseq.com/threat/tornado-authorization-header-forwarded-across-cross-origin-redirects-in-simpleasynchttpclient-cve-2026-2be2ed3a50462860 2026-10-30T08:46:26.185Z weekly 0.8 https://radar.offseq.com/threat/jupyterlab-tornado-has-out-of-bounds-memory-access-via-c-extension-cve-2026-49854-b1504c008d8b923c 2026-10-30T08:59:49.044Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-tornado-asynchttpclient-accumulates-decompressed-chunks-without-size-limit-gzip-bomb-cve-ebd5d7051883001c 2026-10-30T08:46:22.227Z weekly 0.8 https://radar.offseq.com/threat/tornado-urlencoded-body-parsing-omits-maxnumfields-so-one-request-can-stall-the-event-loop-cve-2026-32c43b3c25b980d2 2026-10-30T08:46:18.633Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-4e11e6c0e40dd051 2026-10-30T08:59:45.461Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-ff0e1d0a366b4f5c 2026-10-30T08:59:41.238Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-inconsistent-interpretation-of-http-requests-http-requestresponse-smuggling-in-tornado-cve-6f6af80fcf5f0f77 2026-10-30T08:47:36.121Z weekly 0.7 https://radar.offseq.com/threat/tornado-multipart-split-creates-huge-temp-list-before-maxparts-check-memory-amplification-dos-4a344bf54e334a6b 2026-10-30T08:47:32.866Z weekly 0.7 https://radar.offseq.com/threat/tornado-curlasynchttpclient-leaks-per-request-credentials-on-handle-reuse-cve-2026-91992-f81528dcf6a6e0d3 2026-10-30T08:47:29.084Z weekly 0.7 https://radar.offseq.com/threat/jupyterlab-tornado-has-a-crlf-injection-in-curlasynchttpclient-headers-cve-2024-58384-3740fe986ea37c5e 2026-10-30T08:47:25.403Z weekly 0.7 https://radar.offseq.com/threat/tornado-incomplete-fix-for-cve-2026-35536-cookie-attribute-injection-re-opened-via-the-legacy-case-3a75d8c4c64af44d 2026-10-30T08:47:21.379Z weekly 0.7 https://radar.offseq.com/threat/omnara-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-159d70984bda43c8 2026-10-30T08:46:14.113Z weekly 0.8 https://radar.offseq.com/threat/authlib-issecuretransport-loopback-exemption-can-be-bypassed-with-a-userinfo-component-allowing-4ba33b5861b3d8dc 2026-10-30T08:47:17.315Z weekly 0.7 https://radar.offseq.com/threat/authlib-openid-implicit-grant-checks-raw-scope-instead-of-allowed-scope-before-issuing-id-tokens-cve-30f21a6c1fa96eb5 2026-10-30T08:47:12.631Z weekly 0.7 https://radar.offseq.com/threat/authlib-unvalidated-requesturi-fetch-in-jwt-secured-authorization-request-jar-leading-to-ssrf-cve-2026-97fcbc9e42740d54 2026-10-30T08:47:07.324Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-690996977b47672f 2026-10-30T08:47:02.837Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-6b5e59b7c8594736 2026-10-30T08:46:57.606Z weekly 0.7 https://radar.offseq.com/threat/authlib-jws-jwk-header-injection-signature-verification-bypass-cve-2026-27962-4819485c3ac4fe27 2026-10-30T08:46:11.288Z weekly 0.9 https://radar.offseq.com/threat/omnara-fastmcp-openapi-provider-has-an-ssrf-path-traversal-vulnerability-cve-2026-32871-879a060735d2b83c 2026-10-30T08:46:05.492Z weekly 0.9 https://radar.offseq.com/threat/mycli-setuptools-vulnerable-to-command-injection-via-package-url-cve-2024-6345-a257c0046eaa9feb 2026-10-30T08:46:00.981Z weekly 0.8 https://radar.offseq.com/threat/mycli-setuptools-has-a-path-traversal-vulnerability-in-packageindexdownload-that-leads-to-arbitrary-1bf5f0e074ccf47c 2026-10-30T08:45:57.822Z weekly 0.8 https://radar.offseq.com/threat/setuptools-manifestin-exclusion-bypass-in-sdist-via-unicode-normalization-collision-nfcnfd-on-macos-97df2175b9021fa2 2026-10-30T08:46:53.251Z weekly 0.7 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-4fd2657f6869f45c 2026-10-30T08:46:49.288Z weekly 0.7 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-4f1678c5fcc8f215 2026-10-30T08:46:45.205Z weekly 0.7 https://radar.offseq.com/threat/jiratui-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-lines-f5e5bebb59c16870 2026-10-30T08:45:53.813Z weekly 0.8 https://radar.offseq.com/threat/jiratui-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-fcdecb499eb6687a 2026-10-30T08:45:49.401Z weekly 0.8 https://radar.offseq.com/threat/jiratui-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-arbitrary-2c0f3caf3f464abb 2026-10-30T08:45:44.365Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-fee9553a997d2fea 2026-10-30T08:45:39.679Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-9288f582580e45ba 2026-10-30T08:45:35.004Z weekly 0.8 https://radar.offseq.com/threat/jiratui-gitpython-validates-a-submodules-git-path-only-after-cloning-into-it-rce-cve-2026-114145-a84c95d2fb47fc95 2026-10-30T08:45:30.896Z weekly 0.8 https://radar.offseq.com/threat/mistune-path-traversal-and-xss-in-include-directive-cve-2026-115355-9ca173bd6743cfbd 2026-10-30T08:45:26.337Z weekly 0.8 https://radar.offseq.com/threat/pydantic-settings-nestedsecretssettingssource-follows-symlinks-outside-secretsdir-enabling-local-file-08303bd9f4fcd4ef 2026-10-30T08:45:22.509Z weekly 0.7 https://radar.offseq.com/threat/gitpython-git-config-section-name-injection-enables-arbitrary-config-directives-coresshcommand-rce-cve-752d71e209bf6f6b 2026-10-30T08:44:37.368Z weekly 0.8 https://radar.offseq.com/threat/kaskade-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-0d11d2c721b1cb21 2026-10-30T08:44:33.405Z weekly 0.9 https://radar.offseq.com/threat/authlib-issecuretransport-loopback-exemption-can-be-bypassed-with-a-userinfo-component-allowing-d31b7ef1a699546b 2026-10-30T08:45:17.287Z weekly 0.7 https://radar.offseq.com/threat/kaskade-authlib-incomplete-algorithm-confusion-fix-permits-hmac-forgery-with-prefixed-public-keys-cve-bdd56edd96dca138 2026-10-30T08:44:29.633Z weekly 0.8 https://radar.offseq.com/threat/kaskade-authlib-accepts-an-empty-hmac-key-allowing-jwsjwt-signature-forgery-hs256hs384hs512-cve-2026-691988f97ecd704e 2026-10-30T08:44:25.274Z weekly 0.8 https://radar.offseq.com/threat/authlib-id-token-can-disable-its-own-nonce-validation-via-the-noncesupported-claim-cve-2026-114617-6b4d8a636cf9d7a8 2026-10-30T08:45:12.936Z weekly 0.7 https://radar.offseq.com/threat/authlib-default-jwt-bearer-grant-accepts-assertions-for-the-wrong-audience-cve-2026-114618-b1f2c01d4783799c 2026-10-30T08:45:08.693Z weekly 0.7 https://radar.offseq.com/threat/authlib-openid-implicit-grant-checks-raw-scope-instead-of-allowed-scope-before-issuing-id-tokens-cve-f24e7b0065f9fe1f 2026-10-30T08:45:05.259Z weekly 0.7 https://radar.offseq.com/threat/authlib-unvalidated-requesturi-fetch-in-jwt-secured-authorization-request-jar-leading-to-ssrf-cve-2026-dae30b07906f039c 2026-10-30T08:44:59.429Z weekly 0.7 https://radar.offseq.com/threat/authlib-jws-jwk-header-injection-signature-verification-bypass-cve-2026-27962-f656475cbdaf30ae 2026-10-30T08:44:20.799Z weekly 0.9 https://radar.offseq.com/threat/authlib-empty-signatures-validation-in-jws-json-deserialization-cve-2026-96760-84d5731f0aa7fb46 2026-10-30T08:44:16.142Z weekly 0.9 https://radar.offseq.com/threat/setuptools-windows-path-escape-via-namespacepackagestxt-during-legacy-wheel-installation-description-529e442aae318777 2026-10-30T08:44:53.731Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-fastmcp-vulnerable-to-reflected-xss-in-clients-callback-page-cve-2025-62800-a9db395e68cddabb 2026-10-30T08:44:49.589Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-fastmcp-vulnerable-to-windows-command-injection-in-fastmcp-cursor-installer-via-ccfe9101dbb27501 2026-10-30T08:44:45.971Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-fastmcp-has-a-command-injection-vulnerability-gemini-cli-cve-2025-64340-66c010b74a83e5cb 2026-10-30T08:44:41.823Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-fastmcp-oauth-proxy-token-reuse-across-mcp-servers-cve-2025-69196-a7d8ede316d748d3 2026-10-30T08:44:12.293Z weekly 0.8 https://radar.offseq.com/threat/mcp-atlassian-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-b3d8813513595c83 2026-10-30T08:44:08.050Z weekly 0.8 https://radar.offseq.com/threat/authlib-issecuretransport-loopback-exemption-can-be-bypassed-with-a-userinfo-component-allowing-f18f56e3f9437d0e 2026-10-30T08:32:47.289Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-authlib-incomplete-algorithm-confusion-fix-permits-hmac-forgery-with-prefixed-public-keys-4a457baf68293cc2 2026-10-30T08:32:43.214Z weekly 0.8 https://radar.offseq.com/threat/mcp-atlassian-authlib-accepts-an-empty-hmac-key-allowing-jwsjwt-signature-forgery-hs256hs384hs512-bde6312ea31604bc 2026-10-30T08:32:38.105Z weekly 0.8 https://radar.offseq.com/threat/authlib-id-token-can-disable-its-own-nonce-validation-via-the-noncesupported-claim-cve-2026-114617-1c4ee327327cc0ad 2026-10-30T08:32:34.284Z weekly 0.7 https://radar.offseq.com/threat/authlib-default-jwt-bearer-grant-accepts-assertions-for-the-wrong-audience-cve-2026-114618-1ce5ae59937de80d 2026-10-30T08:32:30.251Z weekly 0.7 https://radar.offseq.com/threat/authlib-openid-implicit-grant-checks-raw-scope-instead-of-allowed-scope-before-issuing-id-tokens-cve-a7c0a83168628e25 2026-10-30T08:32:26.261Z weekly 0.7 https://radar.offseq.com/threat/authlib-unvalidated-requesturi-fetch-in-jwt-secured-authorization-request-jar-leading-to-ssrf-cve-2026-1f3d889962912dfb 2026-10-30T08:32:21.686Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-ccd709726e403302 2026-10-30T08:32:17.097Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-5e04da51bd2aa429 2026-10-30T08:32:12.131Z weekly 0.7 https://radar.offseq.com/threat/fastmcp-missing-consent-verification-in-oauth-proxy-callback-facilitates-confused-deputy-28bd83f39ed724cb 2026-10-30T08:31:37.287Z weekly 0.8 https://radar.offseq.com/threat/authlib-jws-jwk-header-injection-signature-verification-bypass-cve-2026-27962-637de2fc5dab3073 2026-10-30T08:31:33.172Z weekly 0.9 https://radar.offseq.com/threat/mcp-atlassian-authlib-vulnerable-to-jwe-rsa15-bleichenbacher-padding-oracle-cve-2026-28490-6a5d22ea5b2995f7 2026-10-30T08:31:28.651Z weekly 0.8 https://radar.offseq.com/threat/authlib-fail-open-cryptographic-verification-in-oidc-hash-binding-cve-2026-28498-6010d2a5ad8a9f62 2026-10-30T08:31:24.179Z weekly 0.8 https://radar.offseq.com/threat/authlib-setting-alg-none-and-a-blank-signature-appears-to-bypass-signature-verification-cve-2026-28802-68114524c3dcbcbb 2026-10-30T08:31:20.271Z weekly 0.8 https://radar.offseq.com/threat/mcp-atlassian-fastmcp-openapi-provider-has-an-ssrf-path-traversal-vulnerability-cve-2026-32871-06df377aa0c97903 2026-10-30T08:31:16.713Z weekly 0.9 https://radar.offseq.com/threat/authlib-cross-site-request-forging-when-using-cache-cve-2026-41425-30b3b727e6c88c2c 2026-10-30T08:32:07.652Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-authlib-oauth-20-has-open-redirect-in-authorization-api-that-allows-attacker-controlled-7a6ed8ef62527d8e 2026-10-30T08:32:03.639Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-authlib-oidc-implicithybrid-authorization-vulnerable-to-open-redirect-cve-2026-44681-a88dca2f6e72eb9c 2026-10-30T08:31:59.962Z weekly 0.7 https://radar.offseq.com/threat/joserfc-b64false-rfc7797-jws-payloads-bypass-jwsregistry-payload-size-limits-during-deserialization-15b23bcda4fbe257 2026-10-30T08:31:55.814Z weekly 0.7 https://radar.offseq.com/threat/joserfc-hs256hs384hs512-verify-accepts-emptynil-hmac-key-cross-language-sibling-of-cve-2026-45363-cve-e348a88a6875ddb9 2026-10-30T08:31:11.323Z weekly 0.8 https://radar.offseq.com/threat/authlib-empty-signatures-validation-in-jws-json-deserialization-cve-2026-96760-e0edd52167695dd1 2026-10-30T08:31:07.478Z weekly 0.9 https://radar.offseq.com/threat/fastmcp-post-transform-component-authorization-is-skipped-on-direct-calls-be72d222e06d2259 2026-10-30T08:31:52.191Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-fastmcp-auth-integration-allows-for-confused-deputy-account-takeover-6549bca713a78e3d 2026-10-30T08:29:40.782Z weekly 0.8 https://radar.offseq.com/threat/mcp-atlassian-fastmcp-updated-to-mcp-123-due-to-cve-2025-66416-76430e49326328d0 2026-10-30T08:31:47.501Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-7475169c2e3e11f5 2026-10-30T08:31:03.615Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-0503468cfd75c3e6 2026-10-30T08:30:59.053Z weekly 0.7 https://radar.offseq.com/threat/pyjwt-hs256384512-verify-accepts-empty-hmac-key-via-oct-jwk-pyjwkpyjwkclient-enabling-token-forgery-efdaf8d52477fbf3 2026-10-30T08:29:36.681Z weekly 0.8 https://radar.offseq.com/threat/gitpython-repository-content-can-impersonate-the-git-directory-leading-to-arbitrary-code-execution-cve-586e3ac35979c481 2026-10-30T08:29:32.651Z weekly 0.8 https://radar.offseq.com/threat/poetry-virtualenv-allows-command-injection-through-activation-scripts-for-a-virtual-environment-cve-300f51770e40cebb 2026-10-30T08:29:28.331Z weekly 0.8 https://radar.offseq.com/threat/poetry-h11-accepts-some-malformed-chunked-encoding-bodies-cve-2025-43859-dd67467cd8cb00bd 2026-10-30T08:29:24.140Z weekly 0.9 https://radar.offseq.com/threat/poetry-filelock-has-a-toctou-race-condition-which-allows-symlink-attacks-during-lock-file-creation-cve-fa70a03342d47915 2026-10-30T08:30:54.826Z weekly 0.7 https://radar.offseq.com/threat/poetry-virtualenv-bash-and-fish-activation-scripts-execute-commands-embedded-in-paths-cve-2026-102925-b3e87b4751a204f2 2026-10-30T08:29:20.210Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-downloaded-seed-wheels-pipsetuptools-are-not-integrity-checked-before-use-cve-2026-102930-f03ad71339c83c25 2026-10-30T08:29:14.872Z weekly 0.8 https://radar.offseq.com/threat/poetry-virtualenv-writes-prompt-values-into-pyvenvcfg-without-sanitizing-line-boundaries-allowing-1d5e79ad443d90af 2026-10-30T08:30:50.223Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-998bce17245ec778 2026-10-30T08:30:45.419Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-7e159bde116754f2 2026-10-30T08:30:40.477Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-349bb2781433ae51 2026-10-30T08:30:34.788Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-0947057a7febf198 2026-10-30T08:30:29.455Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-4935624406130b9d 2026-10-30T08:30:24.060Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-5520960fa11c81f6 2026-10-30T08:30:19.149Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-c7ede0cb9353effc 2026-10-30T08:30:14.234Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-3c67b90c3a3ca862 2026-10-30T08:30:09.217Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-9a08efd0a06ae1e3 2026-10-30T08:30:04.995Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-dbbb3da357a0f0de 2026-10-30T08:29:59.334Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-0cdd6191e9619c54 2026-10-30T08:29:10.984Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-builtin-creation-follows-linked-environment-directories-cve-2026-113716-66faece9e426d07e 2026-10-30T08:29:54.780Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-seeded-files-retain-permissions-from-an-older-cache-cve-2026-113720-b73102be1ba243de 2026-10-30T08:29:50.630Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-files-can-follow-existing-destination-links-cve-2026-113721-b76208798bd790d2 2026-10-30T08:29:45.742Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-generated-posix-console-launchers-interpret-destination-paths-as-shell-syntax-cve-2026-71426579d339a553 2026-10-30T08:17:53.374Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-prompt-values-can-change-meaning-under-older-compatibility-modes-cve-2026-113723-c9a811df2f6bc117 2026-10-30T08:17:48.576Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-deletion-recovery-can-change-a-symlink-targets-mode-cve-2026-113724-660a8348fc89b2e1 2026-10-30T08:17:44.294Z weekly 0.7 https://radar.offseq.com/threat/poetry-virtualenv-bash-activate-runs-commands-from-an-environment-name-with-a-backslash-before-cve-5fd2c3824133b3a5 2026-10-30T08:17:40.025Z weekly 0.8 https://radar.offseq.com/threat/poetry-virtualenv-activate-runs-commands-from-the-environment-name-in-zsh-with-promptsubst-cve-2026-a4d9097dcedac272 2026-10-30T08:17:35.304Z weekly 0.8 https://radar.offseq.com/threat/poetry-virtualenv-activatefish-runs-commands-from-a-path-or-prompt-with-a-backslash-before-a-quote-cve-40ee5491704a6379 2026-10-30T08:17:30.058Z weekly 0.8 https://radar.offseq.com/threat/poetry-virtualenv-activation-scripts-run-code-from-a-path-that-contains-a-placeholder-name-cve-2026-bdea13c4b4951ec0 2026-10-30T08:17:25.485Z weekly 0.8 https://radar.offseq.com/threat/messagepack-unbounded-memory-leak-in-msgpack-c-extension-on-strictmapkey-validation-failure-cve-2026-981c587b69c0cd52 2026-10-30T08:17:21.455Z weekly 0.8 https://radar.offseq.com/threat/virtualenv-bash-activator-leaves-the-prompt-value-unescaped-in-ps1-when-promptvars-is-off-so-prompt-e87a1fa70d3d3503 2026-10-30T08:16:38.052Z weekly 0.8 https://radar.offseq.com/threat/poetry-filelock-time-of-check-time-of-use-toctou-symlink-vulnerability-in-softfilelock-cve-2026-22701-a6e470cba7070178 2026-10-30T08:17:17.798Z weekly 0.7 https://radar.offseq.com/threat/poetry-virtualenv-has-toctou-vulnerabilities-in-directory-creation-cve-2026-22702-6e9b2c97c985d821 2026-10-30T08:17:12.538Z weekly 0.7 https://radar.offseq.com/threat/poetry-dulwich-has-an-arbitrary-file-write-via-ntfs-hostile-tree-entries-on-windows-cve-2026-42305-aa60a7d482637198 2026-10-30T08:16:34.237Z weekly 0.8 https://radar.offseq.com/threat/poetry-dulwich-vulnerable-to-command-injection-via-merge-driver-path-cve-2026-42563-3edacf2995a35f66 2026-10-30T08:16:29.794Z weekly 0.8 https://radar.offseq.com/threat/poetry-dulwich-doesnt-sanitize-commit-subjects-in-porcelainformatpatch-cve-2026-47712-daa220a2a0fe4d4d 2026-10-30T08:17:08.705Z weekly 0.7 https://radar.offseq.com/threat/poetry-dulwich-has-unbounded-memory-allocation-in-receive-pack-from-crafted-thin-packs-cve-2026-47734-d5d5c29cd1d05907 2026-10-30T08:17:04.623Z weekly 0.7 https://radar.offseq.com/threat/poetry-dulwichs-submodule-path-traversal-in-porcelainsubmoduleupdate-9e0b1d8d451562e2 2026-10-30T08:16:24.716Z weekly 0.8 https://radar.offseq.com/threat/mcp-atlassian-starlette-vulnerable-to-on2-dos-via-range-header-merging-in-862a19c0be689b91 2026-10-30T08:16:20.361Z weekly 0.8 https://radar.offseq.com/threat/opentelemetry-python-unbounded-tracestate-parsing-in-opentelemetry-api-cve-2026-114603-3a5e65ba88e6c4b2 2026-10-30T08:17:00.541Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-regression-in-pymdownxsnippets-reintroduces-sibling-prefix-path-traversal-bypass-despite-6be267cf33ca3a7c 2026-10-30T08:16:56.294Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-starlette-has-missing-host-header-validation-that-poisons-requesturlpath-bypassing-path-dbbdddda2af74e27 2026-10-30T08:16:51.756Z weekly 0.7 https://radar.offseq.com/threat/starlette-arbitrary-http-method-dispatched-to-httpendpoint-attributes-via-getattr-cve-2026-48817-d386cdccf7298662 2026-10-30T08:16:46.467Z weekly 0.7 https://radar.offseq.com/threat/mcp-atlassian-soup-sieve-has-memory-exhaustion-via-large-comma-separated-selector-lists-cve-2026-49476-3e2b572bbdc54f23 2026-10-30T08:16:16.583Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-regular-expression-denial-of-service-redos-via-selector-parser-cve-2026-49477-c7659fa172fa6896 2026-10-30T08:16:11.985Z weekly 0.8 https://radar.offseq.com/threat/starlette-unvalidated-request-path-concatenated-into-authority-poisons-requesturlhostname-cve-2026-466cc4926f07d0fd 2026-10-30T08:16:42.447Z weekly 0.7 https://radar.offseq.com/threat/starlette-requestform-limits-silently-ignored-for-applicationx-www-form-urlencoded-enable-dos-cve-2026-7b3dbe9b566b2016 2026-10-30T08:16:02.977Z weekly 0.8 https://radar.offseq.com/threat/pydantic-settings-nestedsecretssettingssource-follows-symlinks-outside-secretsdir-enabling-local-file-0fb867a1fff73a50 2026-10-30T08:15:58.195Z weekly 0.7 https://radar.offseq.com/threat/pymdown-extensions-path-traversal-in-the-b64-extension-lets-img-src-read-files-outside-basepath-cve-8828b7cc97a38a2e 2026-10-30T08:15:53.857Z weekly 0.7 https://radar.offseq.com/threat/pymdown-extensions-exponential-backtracking-redos-in-caret-tilde-betterem-and-magiclink-inline-4ed3b2ca7e0d8751 2026-10-30T08:15:48.844Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-87e52b5a7395bb20 2026-10-30T08:15:44.586Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-f6318132d5a77f09 2026-10-30T08:15:40.330Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-98a6a259d17d0879 2026-10-30T08:15:35.880Z weekly 0.7 https://radar.offseq.com/threat/nx-path-traversal-in-nx-migrate-package-migrations-extraction-cve-2026-104853-beddebc9a8792bd7 2026-10-30T08:15:31.191Z weekly 0.7 https://radar.offseq.com/threat/nx-daemon-and-plugin-worker-sockets-are-accessible-to-other-local-users-cve-2026-104854-dca2bc72779a134c 2026-10-30T08:15:25.867Z weekly 0.8 https://radar.offseq.com/threat/nx-graph-dev-server-permissive-cors-policy-cve-2026-54753-3fc0ae3df9d885d9 2026-10-30T08:15:21.438Z weekly 0.7 https://radar.offseq.com/threat/nx-zip-slip-in-the-self-hosted-remote-cache-cve-2026-71476-fd5ef9ea3f70a662 2026-10-30T08:15:16.922Z weekly 0.8 https://radar.offseq.com/threat/nx-os-command-injection-via-git-revisions-and-remote-refs-51ed48f30a8c07e4 2026-10-30T08:14:39.188Z weekly 0.8 https://radar.offseq.com/threat/mistral-vibe-gitpython-submodule-update-path-traversal-can-write-outside-the-repository-cve-2026-100689-b8bbf54958a99838 2026-10-30T08:15:12.701Z weekly 0.7 https://radar.offseq.com/threat/gitpython-separategitdir-leaks-env-vars-via-crafted-gitmodules-submodule-name-cve-2026-110855-d6d9a49d43f0e813 2026-10-30T08:15:08.259Z weekly 0.7 https://radar.offseq.com/threat/mistral-vibe-gitpython-parseactoranddate-is-vulnerable-to-quadratic-backtracking-on-malformed-identity-e764d673066ce34d 2026-10-30T08:14:35.204Z weekly 0.8 https://radar.offseq.com/threat/mistral-vibe-gitpython-command-wrappers-omit-unsafe-protocol-and-option-checks-cve-2026-110857-9733cf6b73edb139 2026-10-30T08:14:31.248Z weekly 0.8 https://radar.offseq.com/threat/mistral-vibe-gitpython-remotepull-refspec-bypasses-the-upload-pack-unsafe-option-guard-enabling-fa079f6ae686af53 2026-10-30T08:14:27.261Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-attacker-controlled-branch-name-in-headcheckout-incomplete-fix-of-b95b285a441e6477 2026-10-30T08:14:23.242Z weekly 0.8 https://radar.offseq.com/threat/gitpython-submodulemove-follows-an-attacker-committed-intermediate-symlink-outside-the-worktree-cve-f166033b727e76ab 2026-10-30T08:15:04.096Z weekly 0.8 https://radar.offseq.com/threat/mistral-vibe-gitpython-validates-a-submodules-git-path-only-after-cloning-into-it-rce-cve-2026-114145-fc1c1b7dbfbd5882 2026-10-30T08:14:18.234Z weekly 0.8 https://radar.offseq.com/threat/opentelemetry-python-unbounded-tracestate-parsing-in-opentelemetry-api-cve-2026-114603-3e3196b750872f44 2026-10-30T08:14:59.719Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-http-client-transports-followed-cross-origin-redirects-carrying-8c0d7a4b70faa484 2026-10-30T08:14:48.715Z weekly 0.7 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-990bb04cf1da0f78 2026-10-30T08:14:42.971Z weekly 0.7 https://radar.offseq.com/threat/mistral-vibe-gitpython-has-command-injection-via-git-options-bypass-cve-2026-42215-76191566c2e40834 2026-10-30T08:14:12.883Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-option-check-validates-multioptions-before-shlexsplit-transformation-cve-2026-42284-fde9f05242d380c3 2026-10-30T08:14:09.243Z weekly 0.8 https://radar.offseq.com/threat/mistral-vibe-gitpython-reference-apis-has-a-path-traversal-vulnerability-that-allows-arbitrary-file-c19bdc74cd73010e 2026-10-30T08:03:15.612Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwritersetvalue-enables-rce-via-corehookspath-cve-2026-44244-cc93cab95cb3fde8 2026-10-30T08:03:10.483Z weekly 0.8 https://radar.offseq.com/threat/mcp-python-sdk-http-transports-serve-session-requests-without-verifying-the-authenticated-principal-e7ba4411d2ea858c 2026-10-30T08:03:05.395Z weekly 0.8 https://radar.offseq.com/threat/mcp-python-sdk-experimental-task-handlers-allow-any-client-to-access-and-cancel-other-clients-tasks-fd0987376b9b819b 2026-10-30T08:01:58.743Z weekly 0.8 https://radar.offseq.com/threat/mcp-python-sdk-websocket-server-transport-does-not-support-hostorigin-validation-cve-2026-59950-f515021280a434e9 2026-10-30T08:01:54.515Z weekly 0.8 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-ospathexpandvars-on-repoclonefrom-url-cve-2026-67322-0a0cbd16a8e20249 2026-10-30T08:01:49.582Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-unguarded-git-options-in-repoarchive-gitlsremote-and-arbitrary-file-3ccdfda7fd05b794 2026-10-30T08:01:44.995Z weekly 0.8 https://radar.offseq.com/threat/mistral-vibe-gitpython-unsafe-clone-option-gate-bypass-through-joined-short-options-cve-2026-67324-ac801c1bc208d375 2026-10-30T08:01:40.804Z weekly 0.8 https://radar.offseq.com/threat/gitpython-command-injection-via-git-long-option-prefix-abbreviation-bypass-of-cve-2026-42215-blocklist-d325cb1ef3d96429 2026-10-30T08:01:36.336Z weekly 0.8 https://radar.offseq.com/threat/gitpython-newline-injection-in-configwriter-section-parameter-bypasses-cve-2026-42215-patch-enabling-d1c352f027beb8d6 2026-10-30T08:01:30.837Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-section-name-injection-enables-arbitrary-config-directives-coresshcommand-rce-cve-135faac356e52efe 2026-10-30T08:01:26.315Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitarchiveoptions-denylist-omits-add-file-add-virtual-file-enabling-a178f1cb77f76097 2026-10-30T08:03:01.559Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-indexfilecheckout-and-tagreferencecreate-enables-161b6950265a0d31 2026-10-30T07:59:45.001Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-truncation-via-git-rev-list-output-argument-injection-in-unguarded-commitcount-7d2e1ee655caf81e 2026-10-30T08:02:57.144Z weekly 0.7 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-repocreateremote-remoteadd-url-incomplete-fix-of-7b88c80e7899bf67 2026-10-30T07:59:40.664Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitcloneoptions-denylist-omits-template-enabling-arbitrary-command-d8d326d47962436f 2026-10-30T07:45:46.106Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-overwrite-via-git-diff-output-argument-injection-in-diffablediff-key-and-7ebec13ecc17a271 2026-10-30T07:45:42.120Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-single-character-kwarg-value-token-smuggling-enables-504285daa142f443 2026-10-30T07:45:38.322Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-file-read-via-pathspec-from-file-in-indexfileremove-and-headcheckout-cve-2026-76217-dbed16cbe7e4bc1f 2026-10-30T07:45:34.247Z weekly 0.7 https://radar.offseq.com/threat/gitpython-unguarded-git-option-forwarding-in-repoinit-enables-arbitrary-command-execution-via-template-4588247f1378a1f6 2026-10-30T07:45:29.934Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unguarded-git-read-tree-option-forwarding-in-indexfilefromtreeresetmergetree-enables-be6f1daa046c7936 2026-10-30T07:45:26.065Z weekly 0.8 https://radar.offseq.com/threat/gitpython-unsafe-git-option-guard-bypass-via-splitsinglecharoptionsfalse-short-option-token-smuggling-a6104b881fb789f0 2026-10-30T07:45:21.384Z weekly 0.8 https://radar.offseq.com/threat/gitpython-git-config-option-name-injection-via-whitespace-bypasses-name-validator-enabling-forged-f8ed119a6a9e6391 2026-10-30T07:44:39.924Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-git-repository-creation-outside-the-working-tree-via-unvalidated-gitmodules-6ca767b378365bed 2026-10-30T07:44:35.870Z weekly 0.8 https://radar.offseq.com/threat/gitpython-arbitrary-local-file-content-disclosure-via-include-directive-in-untrusted-gitmodules-08835f3b56ed9a71 2026-10-30T07:44:31.953Z weekly 0.8 https://radar.offseq.com/threat/gitpython-dormant-multi-line-git-config-values-are-corrupted-into-live-injected-directives-eg-cve-2026-679864ef9dd9bb34 2026-10-30T07:44:26.982Z weekly 0.9 https://radar.offseq.com/threat/gitpython-clonefromclone-omit-separate-git-dir-from-unsafegitcloneoptions-enabling-arbitrary-aaff068ffea7d2a0 2026-10-30T07:44:23.081Z weekly 0.8 https://radar.offseq.com/threat/gitpython-incomplete-unsafegitrevisionoptions-denylist-omits-contents-s-enabling-arbitrary-file-read-9d3f0d5ebf9388f3 2026-10-30T07:45:17.625Z weekly 0.7 https://radar.offseq.com/threat/gitpython-tagreferencecreate-positional-reference-bypasses-kwargs-only-file-guard-enabling-arbitrary-0b8f6605a1415c40 2026-10-30T07:45:13.504Z weekly 0.7 https://radar.offseq.com/threat/gitpython-denial-of-service-via-catastrophic-backtracking-redos-in-actornameemailregex-commit-0d643374a2c49424 2026-10-30T07:44:17.414Z weekly 0.8 https://radar.offseq.com/threat/pyjwt-hs256384512-verify-accepts-empty-hmac-key-via-oct-jwk-pyjwkpyjwkclient-enabling-token-forgery-a4d1bfdbbe42f674 2026-10-30T07:44:12.932Z weekly 0.8 https://radar.offseq.com/threat/model-context-protocol-python-sdk-client-fetched-server-chosen-ref-urls-while-validating-tool-results-fe4e62cc8296130d 2026-10-30T07:45:09.496Z weekly 0.7 https://radar.offseq.com/threat/lexicon-requests-vulnerable-to-netrc-credentials-leak-via-malicious-urls-cve-2024-47081-f9a2313413dc75a6 2026-10-30T07:45:04.524Z weekly 0.7 https://radar.offseq.com/threat/lexicon-filelock-has-a-toctou-race-condition-which-allows-symlink-attacks-during-lock-file-creation-1d2ae48eb9d02c88 2026-10-30T07:45:01.311Z weekly 0.7 https://radar.offseq.com/threat/multidict-reference-leak-in-cimultidictmultidict-items-view-union-and-subtraction-cve-2026-104874-775a83c8924ec7d1 2026-10-30T07:44:56.982Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-e3a2db83ed3c4b84 2026-10-30T07:44:53.023Z weekly 0.7 https://radar.offseq.com/threat/lexicon-aiohttp-server-lacks-an-initial-requestheader-timeout-cve-2026-111064-1882197facc042e3 2026-10-30T07:44:08.398Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-connector-pool-exhaustion-via-max-age-overflow-cve-2026-111065-78e7c13120d17711 2026-10-30T07:44:50.004Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-file-descriptor-exhaustion-in-multipart-requests-cve-2026-111066-83e9b1008f982ea3 2026-10-30T07:31:49.498Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-absolute-form-request-targets-can-spoof-requestscheme-cve-2026-111748-807e11e3168ca316 2026-10-30T07:44:46.897Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-cookie-from-subdomain-can-remove-host-only-scope-from-existing-cookies-cve-2026-111749-43db93c6fd72f60a 2026-10-30T07:44:43.351Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-pure-python-parser-request-smuggling-cve-2026-111750-16fcf2c75af1f0cd 2026-10-30T07:33:06.063Z weekly 0.7 https://radar.offseq.com/threat/filelock-on-windows-an-oplock-on-a-soft-locks-marker-holds-softfilelockacquire-past-its-timeout-and-11567c6510ad4f49 2026-10-30T07:33:03.141Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-5e329fe44a238569 2026-10-30T07:32:58.832Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-3ba04d6498ed0f30 2026-10-30T07:32:54.881Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-4e8fd6f6af15cc87 2026-10-30T07:32:50.513Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-241b38a3dffe8d92 2026-10-30T07:32:45.705Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-on-windows-acts-on-sqlite-side-files-another-local-user-places-beside-its-20dbd110034dbf1f 2026-10-30T07:32:40.181Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-d9abbd759159ee1b 2026-10-30T07:32:35.035Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-2e2a83ce085d99aa 2026-10-30T07:32:30.176Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-2f5f80db90b2c217 2026-10-30T07:32:25.388Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-00afb5f407825217 2026-10-30T07:32:21.042Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-9a0756db91d5efd9 2026-10-30T07:32:16.660Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-fed96543f60d94a4 2026-10-30T07:32:11.838Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-sqlite-reopens-the-lock-database-by-name-so-a-planted-symlink-or-journal-file-f2b9c657a3cd6737 2026-10-30T07:31:46.288Z weekly 0.8 https://radar.offseq.com/threat/lexicon-dnspython-dnsnamefromwireparser-excessive-cpu-use-cve-2026-114605-a0fd4c7272157089 2026-10-30T07:31:41.207Z weekly 0.8 https://radar.offseq.com/threat/lexicon-filelock-time-of-check-time-of-use-toctou-symlink-vulnerability-in-softfilelock-cve-2026-22701-dd0173baac949ed7 2026-10-30T07:32:06.291Z weekly 0.7 https://radar.offseq.com/threat/lexicon-soup-sieve-has-memory-exhaustion-via-large-comma-separated-selector-lists-cve-2026-49476-ca424ba7d8f47135 2026-10-30T07:31:38.210Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-regular-expression-denial-of-service-redos-via-selector-parser-cve-2026-49477-c8d5c7d85fde4141 2026-10-30T07:31:34.471Z weekly 0.8 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-whitespacecomment-trimming-regex-rewsend-triggers-on-valid-0133ace467c48433 2026-10-30T07:32:00.826Z weekly 0.7 https://radar.offseq.com/threat/soup-sieve-polynomial-time-redos-on-in-the-identifier-value-selector-sub-patterns-cve-2026-86000-257cdb585d6d473d 2026-10-30T07:31:56.680Z weekly 0.7 https://radar.offseq.com/threat/aiohttp-multiple-instances-of-excessive-or-unbounded-memorycpu-use-53872e821b99e64b 2026-10-30T07:31:29.770Z weekly 0.8 https://radar.offseq.com/threat/aiohttp-secure-attribute-not-enforced-for-shared-cookie-cve-2026-111063-9cb2023db2e19bef 2026-10-30T07:31:52.532Z weekly 0.7 https://radar.offseq.com/threat/posting-scrapy-is-vulnerable-to-a-denial-of-service-dos-attack-due-to-flaws-in-brotli-decompression-acfd94cd090564b6 2026-10-30T07:31:26.742Z weekly 0.8 https://radar.offseq.com/threat/gitpython-repository-content-can-impersonate-the-git-directory-leading-to-arbitrary-code-execution-cve-60f510dec0e06568 2026-10-30T07:31:23.386Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-68f93afd2ca2b9ad 2026-10-30T08:02:52.773Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-8f583ed89af36de2 2026-10-30T07:59:36.511Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-038778f602368411 2026-10-30T07:59:30.586Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-cbc8ce64e271f853 2026-10-30T08:02:47.182Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-5ce551d435526495 2026-10-30T08:02:42.369Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-a428acdf1b34339c 2026-10-30T08:02:37.512Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-5735d440a66e2334 2026-10-30T08:02:33.092Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-16d32dc792797c4e 2026-10-30T08:02:28.339Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-4cac9ffb2b724226 2026-10-30T08:02:23.570Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-curl-security-update-247986628ebad6bd 2026-10-30T08:02:18.050Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-e54db4e3f6af93b4 2026-10-30T07:59:24.062Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-556a1e4e8f729c3a 2026-10-30T07:59:19.255Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-1c651595238ab711 2026-10-30T07:59:14.272Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-9e56ec95ee168686 2026-10-30T07:59:10.314Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-47a4386819fb7fbf 2026-10-30T07:50:59.091Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-27ec3efd0f17d66e 2026-10-30T07:50:54.774Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-8f91f28e7869faff 2026-10-30T07:50:48.694Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-317a0ad8d36eebcb 2026-10-30T07:50:42.498Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-11524843c02c36f5 2026-10-30T07:50:37.912Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-f617d730911732c5 2026-10-30T08:00:54.274Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-8099eb6f4a4900f8 2026-10-30T08:00:48.317Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-bece8ecbc428db00 2026-10-30T07:50:31.578Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-89f917b870ad4a02 2026-10-30T08:00:41.393Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-e65afc813aa6a7c7 2026-10-30T08:00:34.049Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-b76ee9b9a91f4997 2026-10-30T07:50:24.831Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-98aa1c604b856843 2026-10-30T07:50:18.817Z weekly 0.8 https://radar.offseq.com/threat/rsyslog-dynfile-path-traversal-arbitrary-file-write-as-root-rce-67f3f99e4d2f4cb0 2026-10-30T08:00:27.482Z weekly 0.8 https://radar.offseq.com/threat/org-server-present-extension-use-after-free-1e0a59e471c05e91 2026-10-30T08:00:24.470Z weekly 0.7 https://radar.offseq.com/threat/org-server-xinput-passive-grab-use-after-free-023d3bc71bb68b77 2026-10-30T08:00:21.167Z weekly 0.7 https://radar.offseq.com/threat/xorg-server-glx-renderlarge-heap-buffer-overflow-cf9685d70dc64c36 2026-10-30T08:00:18.074Z weekly 0.7 https://radar.offseq.com/threat/xorg-server-xkb-resizekeytype-numeric-truncation-bd972cc0c6c56262 2026-10-30T08:00:14.919Z weekly 0.7 https://radar.offseq.com/threat/xorg-server-xfixes-pointer-barrier-event-list-buffer-overflow-b8e1f06b7359f10e 2026-10-30T08:00:11.482Z weekly 0.7 https://radar.offseq.com/threat/xorg-server-xkb-changekeycoderange-heap-out-of-bounds-write-4d566ef3b8b423a6 2026-10-30T08:00:08.417Z weekly 0.7 https://radar.offseq.com/threat/xorg-server-randr-changeproviderproperty-heap-buffer-overflow-ee156fe4872d2f00 2026-10-30T08:00:05.228Z weekly 0.7 https://radar.offseq.com/threat/xorg-server-xinput2-passiveungrabdevice-out-of-bounds-write-61c008a5b6e38cc6 2026-10-30T08:00:00.808Z weekly 0.7 https://radar.offseq.com/threat/xorg-server-xkb-setmap-key-widthaction-count-desync-out-of-bounds-read-2ce993b391d9e606 2026-10-30T07:59:57.540Z weekly 0.7 https://radar.offseq.com/threat/xorg-server-gesturebuildsprite-use-after-free-f618a1e0fbaa9d42 2026-10-30T07:59:54.607Z weekly 0.7 https://radar.offseq.com/threat/amplified-resource-exhaustion-in-inbound-message-processing-227560221de4dbf3 2026-10-30T07:59:51.357Z weekly 0.7 https://radar.offseq.com/threat/concurrent-gss-tsig-messages-corrupt-memory-f1914a72758550b9 2026-10-30T07:59:48.567Z weekly 0.7 https://radar.offseq.com/threat/named-may-terminate-unexpectedly-when-a-redirect-zone-is-used-with-strict-qname-minimization-5f0797277cf42756 2026-10-30T07:51:52.663Z weekly 0.7 https://radar.offseq.com/threat/specific-rpz-configurations-and-query-patterns-may-result-in-an-unexpected-exit-00317a9e53c6e871 2026-10-30T07:51:49.834Z weekly 0.7 https://radar.offseq.com/threat/virtualenv-deletion-recovery-can-change-a-symlink-targets-mode-9c0cd89a315f3709 2026-10-30T07:51:46.691Z weekly 0.7 https://radar.offseq.com/threat/libxrender-renderquerypictformats-reply-heap-based-buffer-overflow-71808711b7f0278e 2026-10-30T07:51:43.730Z weekly 0.7 https://radar.offseq.com/threat/race-condition-in-tempfiletemporarydirectory-cleanup-allows-deleting-files-outside-the-temporary-6af1e674943971ab 2026-10-30T07:51:40.469Z weekly 0.8 https://radar.offseq.com/threat/mm-call-the-securitymmapfile-lsm-hook-in-remapfilepages-5f85e752af0ba2a1 2026-10-30T07:51:37.432Z weekly 0.7 https://radar.offseq.com/threat/in-libexpat-through-273-a-crafted-file-with-an-approximate-size-of-2-mib-can-lead-to-dozens-of-seconds-fa3bcbc4ce7dd197 2026-10-30T07:51:33.724Z weekly 0.7 https://radar.offseq.com/threat/kvm-x86mmu-dropzap-existing-present-spte-even-when-creating-an-mmio-spte-50b3bf2fe4cbafaa 2026-10-30T07:51:30.603Z weekly 0.7 https://radar.offseq.com/threat/apparmor-fix-memory-leak-in-verifyheader-311ec82c737e4435 2026-10-30T07:51:27.929Z weekly 0.7 https://radar.offseq.com/threat/apparmor-replace-recursive-profile-removal-with-iterative-approach-14a29f37daa7e6b7 2026-10-30T07:51:25.250Z weekly 0.7 https://radar.offseq.com/threat/apparmor-fix-limit-the-number-of-levels-of-policy-namespaces-97426e40b9285dd1 2026-10-30T07:51:22.641Z weekly 0.7 https://radar.offseq.com/threat/apparmor-fix-side-effect-bug-in-matchchar-macro-usage-2961bb12e885dcf2 2026-10-30T07:51:19.618Z weekly 0.7 https://radar.offseq.com/threat/apparmor-fix-missing-bounds-check-on-default-table-in-verifydfa-575b2cbc383fa256 2026-10-30T07:51:16.438Z weekly 0.7 https://radar.offseq.com/threat/apparmor-fix-double-free-of-nsname-in-aareplaceprofiles-d60ab72871b433db 2026-10-30T07:51:12.803Z weekly 0.7 https://radar.offseq.com/threat/apparmor-fix-differential-encoding-verification-9c71577f5d72bd7f 2026-10-30T07:51:08.858Z weekly 0.7 https://radar.offseq.com/threat/apparmor-fix-race-on-rawdata-dereference-16013c92a90c1f3a 2026-10-30T07:51:05.839Z weekly 0.7 https://radar.offseq.com/threat/apparmor-fix-race-between-freeing-data-and-fs-accessing-it-0464430e432c82c9 2026-10-30T07:51:02.784Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-claims-acct-unlock-npm-28568743f9f8ab2e 2026-10-30T12:43:44.058Z weekly 0.7 https://radar.offseq.com/threat/get-iplayer-mojolicious-versions-from-728-through-945-for-perl-will-generate-weak-hmac-session-cookie-f2facdb9bb779739 2026-10-30T08:02:02.491Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-82104-cwe863-incorrect-authorization-in-teltonika-networks-rut-fa6ae78ef5328d8c 2026-10-30T08:16:06.989Z weekly 0.9 https://radar.offseq.com/threat/6-billion-binance-hack-bears-hallmarks-of-north-koreas-tradertraitor-6dd8fd959e55b8ab 2026-10-30T08:29:22.443Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-115456-out-of-bounds-read-in-red-hat-red-hat-enterprise-linux-10-78b7f293a6e4e1aa 2026-10-30T08:31:44.126Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-65874-cwe-89-sql-injection-in-apache-software-foundation-apache-fineract-83c6f69a7b29f8eb 2026-10-30T09:10:29.643Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-59386-credential-exposure-to-space-supporter-1a4d91d5a8ab03bc 2026-10-30T08:46:40.280Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-59388-cloud-controller-exposes-secrets-in-audit-log-f280c07ebe1f8316 2026-10-30T09:39:37.185Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-59396-dos-vulnerability-in-uaa-related-to-jwks-uri-handling-a9452232cc143ba2 2026-10-30T08:46:33.583Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-64618-cwe-89-sql-injection-in-apache-software-foundation-apache-fineract-0221317e24b2033f 2026-10-30T09:10:27.784Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-59387-broken-access-control-restriction-in-cloud-controller-api-efc65f1be11caf51 2026-10-30T09:00:54.582Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-59385-space-developer-can-extract-space-scoped-broker-credentials-d1eb466f21145d59 2026-10-30T09:01:30.107Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-97209-cwe-377-deprecated-insecure-temporary-file-in-elixir-lang-elixir-c85e915fc55013e9 2026-10-30T10:14:52.806Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-109821-cwe-1284-improper-validation-of-specified-quantity-in-input-in-elixir-lang-elixir-0a02e9d8370a606e 2026-10-30T10:14:49.501Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-115274-cwe-1284-improper-validation-of-specified-quantity-in-input-in-elixir-lang-elixir-1779a63b3499084d 2026-10-30T10:11:50.548Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs24-security-bug-fix-and-enhancement-update-de0641ac9043062d 2026-10-30T10:11:45.778Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs22-security-bug-fix-and-enhancement-update-ca30b13ab8c271d2 2026-10-30T10:11:41.647Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-openshift-data-foundation-4222-security-enhancement-bug-fix-update-9dc635b9d396ecf8 2026-10-30T10:11:36.409Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-pipewire-security-update-a90c9fb191d4d655 2026-10-30T10:11:32.120Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-enterprise-linux-ai-336-enhancement-update-49fc109ce2ca051f 2026-10-30T10:11:28.615Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-enterprise-linux-ai-336-enhancement-update-3d10751b8b862cf2 2026-10-30T10:11:12.840Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-advisor-frontend-rhel9-container-66a6bce5e86d0813 2026-10-30T10:11:07.403Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-a493b7cc19cbf16a 2026-10-30T10:11:00.806Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-0742e90d2d18c7e7 2026-10-30T10:10:53.354Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-ea6154a67cb273b9 2026-10-30T10:10:47.369Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-4223-bug-fix-and-security-update-0956bc1f52bf2345 2026-10-30T12:17:36.000Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-4223-security-and-extras-update-2c291960a1e028d1 2026-10-30T10:10:38.434Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42122-bug-fix-and-security-update-99924d87c25d72f2 2026-10-30T10:10:31.673Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42027-bug-fix-and-security-update-953f02084476b88e 2026-10-30T10:10:27.397Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-61cf0db61fc16a85 2026-10-30T10:10:21.353Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42123-security-and-extras-update-784059aa53a54216 2026-10-30T10:10:16.840Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42028-bug-fix-and-security-update-75bfb701b8714261 2026-10-30T10:10:11.039Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-e358668542860ed4 2026-10-30T10:10:06.483Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-41937-bug-fix-and-security-update-5384c161bc7e12da 2026-10-30T10:10:01.139Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42124-bug-fix-and-security-update-cce0bc7966ccaa0c 2026-10-30T12:17:50.000Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42029-bug-fix-and-security-update-6ea20bb32943eff1 2026-10-30T12:17:54.000Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-rh-podman-desktop-security-advisory-update-7795108e8cc923b5 2026-10-30T12:17:50.000Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-41939-bug-fix-and-security-update-61a392da33de22a3 2026-10-30T10:00:53.151Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-b5888d5b78744e70 2026-10-30T10:00:48.829Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-quay-3157-765216d2c05f917d 2026-10-30T10:00:42.691Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-ansible-automation-platform-27-container-release-update-9435b2a32305dc0a 2026-10-30T10:00:37.447Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-ansible-automation-platform-21-security-update-80d7caf1788bd92d 2026-10-30T10:00:32.390Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-rhtas-14-ga-release-of-model-transparency-103-d76594f1962cf9d6 2026-10-30T10:00:23.584Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-fence-agents-security-update-089b3ccd24c082ab 2026-10-30T10:00:15.800Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-resource-agents-security-update-1b2ad47c42f7efd6 2026-10-30T10:00:12.098Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-fence-agents-security-update-30abff994fd91707 2026-10-30T10:00:08.282Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-1678721aa1e6314a 2026-10-30T10:00:04.702Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-51db679dd2a7bbe7 2026-10-30T09:59:58.015Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-bd8b40d0f2f4f646 2026-10-30T09:59:53.405Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-fence-agents-security-update-62ff1a61cf8bc224 2026-10-30T09:59:49.467Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-fence-agents-security-update-e45bf0f935fa32ad 2026-10-30T09:59:45.728Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-a86a0dd8bdcd1d08 2026-10-30T09:59:42.017Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-fence-agents-security-update-998547f983be693a 2026-10-30T09:59:35.791Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-resource-agents-security-update-fa6bf8f3aa7b2c7d 2026-10-30T09:59:31.861Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-5fa08e2335c5a35c 2026-10-30T09:59:28.120Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-fence-agents-security-update-77ce90eeeb1ec6ff 2026-10-30T09:59:21.494Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-fence-agents-security-update-72fe2aac971a9061 2026-10-30T09:59:17.147Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-resource-agents-security-update-cc5878714bec0064 2026-10-30T09:59:13.405Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-fence-agents-security-update-38435b81726ae643 2026-10-30T09:59:09.702Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-resource-agents-security-update-fbaba7c71843e6b8 2026-10-30T09:52:25.616Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-3a56f05d8d15dcf5 2026-10-30T09:52:21.676Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-554165929af624e8 2026-10-30T09:52:17.902Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-39a0e772378ae980 2026-10-30T09:52:14.843Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-77ec55dd5ef0c559 2026-10-30T09:52:11.074Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-1a780aa4b0ab6118 2026-10-30T09:52:06.603Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-93e7a1932b8d2083 2026-10-30T09:52:03.408Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-6e4a2fcf4abc9aed 2026-10-30T09:51:59.882Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-cc0973eadeb1616a 2026-10-30T09:51:52.891Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-1e6492c7f57f7eb3 2026-10-30T09:51:48.984Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-f6dc1853e9380608 2026-10-30T09:51:45.325Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-pyasn1-security-update-953ab7316e94c2e0 2026-10-30T09:51:41.199Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-resource-agents-security-update-87d0e3ff4cc1614b 2026-10-30T09:51:38.258Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-rhtas-137-red-hat-trusted-artifact-signer-release-8d99a73e90b50319 2026-10-30T09:51:34.295Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-7f59e3556d6ad84c 2026-10-30T09:51:16.809Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-28bbcc042329e08d 2026-10-30T09:51:28.131Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-4f5e6bd9305020ce 2026-10-30T09:51:10.559Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-advisor-backend-rhel9-container-529511af2ea9784b 2026-10-30T09:51:04.599Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-995b4c66500eef9d 2026-10-30T09:50:58.955Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-lxml-security-update-e21e61109d920686 2026-10-30T09:50:52.101Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat-security-update-1c7971be76e8e5ac 2026-10-30T09:50:48.425Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-java-21-openjdk-security-update-for-rhel-8-and-9-a19fba5a18c7f53d 2026-10-30T09:50:44.267Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-5621b6f520185d5c 2026-10-30T09:51:22.488Z weekly 0.7 https://radar.offseq.com/threat/red-hat-bug-fix-advisory-cockpit-bug-fix-and-enhancement-update-0b9504132f8b16c8 2026-10-30T09:50:39.539Z weekly 0.9 https://radar.offseq.com/threat/red-hat-bug-fix-advisory-cockpit-bug-fix-and-enhancement-update-dcb4e29341ceb1b0 2026-10-30T09:46:49.880Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-pcs-security-update-cbe579b8a1927bca 2026-10-30T09:46:41.205Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-pcs-security-update-8fefc2b26f614c5e 2026-10-30T09:46:33.370Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-pcs-security-update-7c11c8f83e70603c 2026-10-30T09:46:21.442Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-pcs-security-update-0f410b6f3a55c06f 2026-10-30T09:46:14.876Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-pcs-security-update-c01723d57194020c 2026-10-30T09:46:07.779Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-pcs-security-update-72bd3b24db12a9d2 2026-10-30T09:45:58.087Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-41d062ba6afe4e6e 2026-10-30T09:45:51.585Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-advisor-frontend-rhel9-container-9598f9e9008e5a29 2026-10-30T09:44:41.644Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-host-inventory-frontend-rhel9-1908cd7ac961b8f0 2026-10-30T09:44:36.899Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-330ccb70ed3c3732 2026-10-30T09:45:37.013Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42023-security-and-extras-update-27fbad00b3c43ad4 2026-10-30T09:44:32.472Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-pcs-security-update-fa20f2a2638de876 2026-10-30T09:44:25.727Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-ebd1004a23191d08 2026-10-30T09:45:25.076Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-171ac05360621e3e 2026-10-30T09:45:14.795Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-cockpit-image-builder-security-update-1a79253fdb75f05a 2026-10-30T09:31:56.008Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-5e9f3a5467a9dba7 2026-10-30T09:31:51.026Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-b466e5dfa7f27c09 2026-10-30T09:31:37.452Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-e6424005e08e92dd 2026-10-30T09:31:31.652Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-36b2d232b309a053 2026-10-30T09:31:18.067Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-host-inventory-frontend-rhel9-4af6afd58a1a31ec 2026-10-30T09:30:59.556Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-34f1bfab0d81fb70 2026-10-30T09:30:50.830Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-ff9c4857a862f552 2026-10-30T09:30:40.858Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-41936-bug-fix-and-security-update-915d0e6dca1b7cea 2026-10-30T09:30:31.498Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-253b02cf09e767e2 2026-10-30T09:30:24.443Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-host-inventory-frontend-rhel9-0bec0ba8dcee7c4c 2026-10-30T09:30:18.287Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kiali-2227-for-red-hat-openshift-service-mesh-33-d26180af57c7fa0d 2026-10-30T09:30:09.727Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kiali-21114-for-red-hat-openshift-service-mesh-31-1e3b2eb70643297a 2026-10-30T09:30:02.524Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-ansible-automation-platform-22-security-update-ca00bd3e58bbd541 2026-10-30T09:29:56.628Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42031-security-and-extras-update-67416d4e5a64fa28 2026-10-30T09:29:52.674Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42126-security-and-extras-update-61897a0ed6d6c97b 2026-10-30T09:29:48.309Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-virtualization-v420-images-eed0bed21424d82e 2026-10-30T09:29:44.551Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs24-security-update-5a02045b4d06cdb6 2026-10-30T09:29:39.359Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs22-security-update-45ee66b4a538e974 2026-10-30T09:29:35.882Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs22-security-update-971302cda900edc9 2026-10-30T09:29:31.543Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs24-security-update-3406ce899d285564 2026-10-30T09:29:27.936Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs-nodemon-security-update-891f90d80f50717b 2026-10-30T09:29:24.013Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs22-security-update-ea69eba1f71e0da7 2026-10-30T09:29:20.228Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs24-security-update-4f4c3392a30069a7 2026-10-30T09:29:15.543Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42127-bug-fix-and-security-update-3dea5af221e2068e 2026-10-30T09:29:11.201Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-41942-security-and-extras-update-e7419a8a7916108b 2026-10-30T09:20:30.171Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-41852-security-and-extras-update-a2e98b4a7a2bb40c 2026-10-30T09:20:26.035Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-host-inventory-frontend-rhel9-15c968532c0df970 2026-10-30T09:20:22.195Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-technical-preview-of-the-satelliteiop-vulnerability-frontend-rhel9-container-f6b2699ea73de417 2026-10-30T09:20:17.829Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-advisor-frontend-rhel9-container-0f0b27b436e85e58 2026-10-30T09:20:13.268Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-ansible-automation-platform-22-security-update-5e7354f2d483746a 2026-10-30T09:20:09.342Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-advisor-frontend-rhel9-container-c8a2e8095107cdae 2026-10-30T09:20:05.355Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-technical-preview-of-the-satelliteiop-vulnerability-frontend-rhel9-container-e17b919c63722aa4 2026-10-30T09:20:01.321Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-host-inventory-frontend-rhel9-65d0468e7c4fa5bf 2026-10-30T09:19:56.574Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs-nodemon-security-update-c388cafd9c20c378 2026-10-30T09:19:52.366Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-nodejs22-security-update-f7704f85eb5aaadd 2026-10-30T09:19:48.639Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-41370-bug-fix-and-security-update-264ba723eae4acbf 2026-10-30T09:19:44.699Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-41296-bug-fix-and-security-update-33a36e97b45658d7 2026-10-30T09:19:40.592Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-idna-security-update-2c5876f42a72545f 2026-10-30T09:19:36.468Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-python-idna-security-update-01f5e9bcff6bbc82 2026-10-30T09:19:33.269Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-4589c21bc02ba9c1 2026-10-30T09:19:22.564Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-idna-security-update-294f66cd2e69f1d9 2026-10-30T09:19:29.717Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-virtualization-v412-images-5ddf7457c09f12ec 2026-10-30T09:19:16.817Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-080b4b80b93cceff 2026-10-30T09:19:10.839Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-general-availability-of-the-satelliteiop-advisor-backend-rhel9-container-24820dcc2e5dc5c3 2026-10-30T09:19:05.401Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-ace7e9a9eef43a65 2026-10-30T09:18:59.699Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-python-tornado-security-update-3552533e34f07ce7 2026-10-30T09:19:26.284Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-qemu-kvm-security-bug-fix-and-enhancement-update-62e7189bddb6e9b8 2026-10-30T09:18:54.203Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kernel-security-update-916d3f521003f349 2026-10-30T09:18:50.603Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kernel-rt-security-update-9b1ecf05325e62cd 2026-10-30T09:18:46.505Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-gstreamer1-plugins-good-security-update-f0ba264adc8f2bbc 2026-10-30T09:45:08.003Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-curl-security-bug-fix-and-enhancement-update-8e540cf38cb9eb51 2026-10-30T09:44:22.209Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-security-update-6e98ea577c4fc83b 2026-10-30T09:45:03.851Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-gstreamer1-plugins-good-security-update-735fb4983c628b4c 2026-10-30T09:44:57.877Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-libkcapi-security-update-7a5bfc8f5486f753 2026-10-30T09:44:53.841Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-libkcapi-security-bug-fix-and-enhancement-update-9d49f8d6cf046218 2026-10-30T09:44:49.669Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-libkcapi-security-bug-fix-and-enhancement-update-d312cfa03a588498 2026-10-30T09:44:45.885Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-gstreamer1-plugins-good-security-update-1c0855595b4ecc45 2026-10-30T09:44:18.122Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-gstreamer1-plugins-good-security-update-2e26d13e4fb1865a 2026-10-30T09:44:13.939Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-gstreamer1-plugins-good-security-update-b4159bc8b7380c38 2026-10-30T09:44:09.707Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-gstreamer1-plugins-good-security-update-d9b185b8b7947c80 2026-10-30T09:37:19.003Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-libkcapi-security-update-b2ef58ae62d57f35 2026-10-30T09:37:14.922Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-gstreamer1-plugins-good-security-update-e73fe02366de6508 2026-10-30T09:37:10.762Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-gstreamer1-plugins-good-security-update-fb5517e24dd2d67b 2026-10-30T09:37:06.537Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-gstreamer1-plugins-good-security-update-ca951f3d51c4f631 2026-10-30T09:37:01.655Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-libkcapi-security-update-08842229e3ff1904 2026-10-30T09:36:56.905Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-45b279c32ef78d92 2026-10-30T09:36:52.344Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-unbound-security-update-34315844a9b01dfa 2026-10-30T09:36:46.752Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-jboss-web-server-700-security-release-d985f1bca10afd89 2026-10-30T09:36:42.429Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-jboss-web-server-700-security-release-459f6035d07316f2 2026-10-30T09:36:37.946Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-jboss-web-server-624-release-and-security-update-0f055b1e3f9cfd4c 2026-10-30T09:36:33.145Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-jboss-web-server-624-release-and-security-update-8ec402b45e6373d1 2026-10-30T09:36:28.169Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kernel-security-update-3647465777e57c6f 2026-10-30T09:36:21.837Z weekly 0.8 https://radar.offseq.com/threat/sqlite-before-3532-out-of-bounds-read-in-fts5-fts5leafseek-cve-2026-11822-e13e6e4d99f9b5e2 2026-10-30T09:36:18.338Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat9-security-update-dd7a2df59383d2e0 2026-10-30T09:35:59.704Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat-security-update-6891a4a52afd4d81 2026-10-30T09:35:54.934Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat9-security-update-4454688195bdfca6 2026-10-30T09:36:15.111Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat-security-bug-fix-and-enhancement-update-6e429588af1ca4b2 2026-10-30T09:36:10.404Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat-security-update-7b6130e3a02fabcf 2026-10-30T09:35:50.207Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat-security-update-6d3281e00dcc5021 2026-10-30T09:35:45.661Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat-security-update-243f6b89e1299055 2026-10-30T09:35:41.142Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat-security-update-0b2b02943a1ee3ce 2026-10-30T09:35:36.112Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat-security-update-bce9428b520dd059 2026-10-30T09:35:31.460Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-tomcat-update-6914753bdb181f8d 2026-10-30T09:36:03.902Z weekly 0.7 https://radar.offseq.com/threat/2-million-drained-from-polymarket-traders-in-new-supply-chain-attack-d912cadd28ddcafd 2026-10-30T09:44:22.429Z weekly 0.8 https://radar.offseq.com/threat/how-attackers-redirect-crypto-payments-f37fe42cadc38084 2026-10-30T09:51:56.007Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-14467-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-forocoches-c603ddc00881e39c 2026-10-30T10:09:55.720Z weekly 0.8 https://radar.offseq.com/threat/kairos-holdem-dissecting-a-new-go-based-ddos-botnet-477542118fc87d04 2026-10-30T10:11:24.204Z weekly 0.7 https://radar.offseq.com/threat/trojanized-claude-code-extension-plants-an-ssh-backdoor-1ed23380ec7e6255 2026-10-30T10:11:20.424Z weekly 0.7 https://radar.offseq.com/threat/polymarket-breach-alert-wallet-draining-code-found-in-a-third-party-script-b99b5c8cc6d3094a 2026-10-30T10:11:16.287Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-log-utils-sdk-pypi-c361898c083d93a5 2026-10-30T12:43:49.508Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-kernel-security-update-2c3a1be6e9a3530b 2026-10-30T10:45:16.547Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kernel-security-bug-fix-and-enhancement-update-3a1d990eae9f80f5 2026-10-30T10:45:12.196Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-41296-bug-fix-and-security-update-6782971975c63364 2026-10-30T10:45:07.666Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42120-bug-fix-and-security-update-ae65146a1749b7f9 2026-10-30T10:45:02.944Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42025-bug-fix-and-security-update-5437191c17ebc4f2 2026-10-30T10:44:59.060Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-kernel-security-update-69348b682201b8e7 2026-10-30T10:44:55.375Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-5140-4271001-kpatch-patch-5140-4271131-fadd359c039850d0 2026-10-30T10:44:51.630Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-5140-687101-security-update-dead7f272613c2b5 2026-10-30T10:44:48.010Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-6120-211161-security-update-30fca3d969a34653 2026-10-30T10:44:44.138Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-4180-4771071-kpatch-patch-4180-4771201-634b1ef13cbf73ff 2026-10-30T10:44:40.090Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-4180-5531091-kpatch-patch-4180-5531251-kpatch-patch-4180-553531-65debc49befe617b 2026-10-30T10:44:35.599Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-5140-2841171-kpatch-patch-5140-2841341-6550b03c2c506e67 2026-10-30T10:44:31.238Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-5140-5701161-kpatch-patch-5140-570171-kpatch-patch-5140-570391-ba705af9060b087a 2026-10-30T10:44:26.965Z weekly 0.9 https://radar.offseq.com/threat/red-hat-security-advisory-kernel-security-update-e7ce8a45818dbfa0 2026-10-30T10:44:23.147Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kernel-security-update-8836b5a6e620582f 2026-10-30T10:44:19.309Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-5140-687101-security-update-a98d8a115952a8b5 2026-10-30T10:44:15.085Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-6120-211161-security-update-f6e58f864203ad05 2026-10-30T10:44:09.981Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-4180-4771071-kpatch-patch-4180-4771201-ba6fff0748ecf6c7 2026-10-30T10:32:24.132Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-4180-5531091-kpatch-patch-4180-5531251-kpatch-patch-4180-553531-2e4689196610f3c3 2026-10-30T10:32:20.063Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-5140-5701161-kpatch-patch-5140-570171-kpatch-patch-5140-570391-fea0a51833ffe789 2026-10-30T10:31:19.354Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-5140-4271001-kpatch-patch-5140-4271131-3641d9fb4a398221 2026-10-30T10:31:15.344Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kpatch-patch-5140-2841171-kpatch-patch-5140-2841341-f55435cf5d60b0bb 2026-10-30T10:31:11.065Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-41850-bug-fix-and-security-update-90e05e9f00933da8 2026-10-30T10:31:06.507Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-kernel-rt-security-update-2a079916ada86b25 2026-10-30T10:32:15.255Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-kernel-security-update-f27f42c2263d12ae 2026-10-30T10:32:11.871Z weekly 0.7 https://radar.offseq.com/threat/the-ai-engine-the-chatbot-ai-framework-mcp-for-wordpress-plugin-for-wordpress-is-vulnerable-to-missing-3afb99ffc2f12629 2026-10-30T10:31:01.414Z weekly 0.8 https://radar.offseq.com/threat/the-gravity-forms-plugin-for-wordpress-is-vulnerable-to-php-object-injection-in-all-versions-up-to-and-5da070020e2b575a 2026-10-30T10:30:56.433Z weekly 0.9 https://radar.offseq.com/threat/a-flaw-was-found-in-red-hat-enterprise-linux-9-kernel-builds-cve-2026-118593-5f1da2f5a0b6bea0 2026-10-30T10:32:07.986Z weekly 0.7 https://radar.offseq.com/threat/the-food-store-online-food-delivery-pickup-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-1bb5b2e4c56d94b5 2026-10-30T10:29:37.238Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-the-kroxylicious-acl-authorizer-cve-2026-118952-e54b0e3ebef07809 2026-10-30T10:32:03.540Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-gcc-an-out-of-bounds-memory-access-vulnerability-exists-in-the-libstdc-parallel-d13cbf5a2899ac0d 2026-10-30T10:31:59.967Z weekly 0.7 https://radar.offseq.com/threat/in-teltonika-networks-rutos-devices-running-versions-from-722-through-7242-and-tswos-devices-running-754a7a56d55cfce7 2026-10-30T10:29:33.325Z weekly 0.9 https://radar.offseq.com/threat/the-formidable-forms-wordpress-form-builder-for-contact-forms-calculators-quizzes-more-plugin-for-f853529a5cc3d6d3 2026-10-30T10:29:29.799Z weekly 0.8 https://radar.offseq.com/threat/the-gravity-forms-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-list-field-in-976b0fec3e9c9d0c 2026-10-30T10:29:26.488Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-the-libstdc-component-of-gcc-cve-2026-114691-385310f21ea55cfe 2026-10-30T10:31:56.177Z weekly 0.7 https://radar.offseq.com/threat/the-gravity-forms-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-post-excerpt-5ee57e251b887fa9 2026-10-30T10:29:23.163Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-gcc-an-attacker-could-cause-a-denial-of-service-dos-by-passing-a-string-that-is-not-aeb336e77507d9de 2026-10-30T10:31:51.814Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-gcc-libstdc-cve-2026-115455-409efe103fe8ddb4 2026-10-30T10:31:47.802Z weekly 0.7 https://radar.offseq.com/threat/improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-cve-a9fff2935b810c1a 2026-10-30T12:31:14.000Z weekly 0.8 https://radar.offseq.com/threat/the-nginx-routing-configuration-for-cloud-controller-blocks-unauthenticated-access-to-internalv4-and-afb25d795a0b3a75 2026-10-30T10:29:18.767Z weekly 0.8 https://radar.offseq.com/threat/a-spacesupporter-could-improperly-modify-an-applications-start-command-and-buildpackactions-cve-2026-701eff4560805661 2026-10-30T10:31:39.048Z weekly 0.7 https://radar.offseq.com/threat/this-issue-affects-apache-fineract-versions-up-to-and-including-1150-cve-2026-65874-400c419919e1e608 2026-10-30T12:31:14.000Z weekly 0.8 https://radar.offseq.com/threat/cloud-controller-capi-leaks-sensitive-data-into-audit-logs-in-multiple-instances-custom-buildpack-b6eb7303ec841eab 2026-10-30T10:31:32.839Z weekly 0.7 https://radar.offseq.com/threat/a-user-with-spacedeveloper-privileges-could-modify-the-url-of-a-space-scoped-broker-without-altering-7334462abc5a54a4 2026-10-30T10:31:29.401Z weekly 0.7 https://radar.offseq.com/threat/a-denial-of-service-vulnerability-exists-in-uaas-privatekeyjwt-client-authentication-mechanism-cve-f9b8227e97fc7562 2026-10-30T10:31:26.158Z weekly 0.7 https://radar.offseq.com/threat/from-013-until-180-authlibcommonsecurityissecuretransport-uses-a-textual-prefix-comparison-for-loopback-1fdad628a2e2bb3e 2026-10-30T10:31:23.320Z weekly 0.7 https://radar.offseq.com/threat/from-131-until-190-octkeyimportkey-checks-asymmetric-key-markers-only-at-byte-zero-while-authlibs-pem-e50ef1d6d9116872 2026-10-30T10:29:15.169Z weekly 0.9 https://radar.offseq.com/threat/prior-to-191-authlibs-octkeyimportkey-and-hmac-signing-and-verification-path-accept-cve-2026-114616-2d38180834e402c9 2026-10-30T10:29:10.056Z weekly 0.9 https://radar.offseq.com/threat/authlib-prior-to-190-openidmixinparseidtoken-reads-the-noncesupported-decision-from-the-untrusted-id-a288c8c6073b64f4 2026-10-30T10:30:39.260Z weekly 0.7 https://radar.offseq.com/threat/authlib-prior-to-190-the-default-rfc-7523-jwtbearergrantgetaudiences-returns-an-empty-list-causing-0a31eb39ae733a4e 2026-10-30T10:30:35.375Z weekly 0.7 https://radar.offseq.com/threat/authlib-prior-to-190-openidimplicitgrantvalidateauthorizationrequest-checks-the-client-controlled-raw-d63a39f2e8e40e27 2026-10-30T10:30:30.479Z weekly 0.7 https://radar.offseq.com/threat/prior-to-190-authlibs-rfc-9101-jwtauthenticationrequest-passes-the-unauthenticated-client-controlled-336e2242176059e8 2026-10-30T10:30:25.498Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-ai-spellcheckers-pypi-cc7102f4921232a5 2026-10-30T10:30:21.421Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-collectables-pypi-4af87104f9c8d27d 2026-10-30T10:30:18.530Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-collecters-pypi-6c1811a28b9762c8 2026-10-30T10:30:15.535Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-collects-pypi-531e9cb64364e7c6 2026-10-30T10:30:12.407Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-gridifies-pypi-d56f18e301f1424b 2026-10-30T10:30:09.016Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-gridifys-pypi-4825fcf5ba1b929c 2026-10-30T10:30:05.837Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-openai-spellcheckers-pypi-24aa4af7acd92386 2026-10-30T10:30:02.115Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-printrables-pypi-58df257a471a95bf 2026-10-30T10:29:58.588Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-spellcheckerpy-pypi-86256fb2ef15811b 2026-10-30T10:29:55.398Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-spellcheckers-pypi-e857cca84854e625 2026-10-30T10:29:51.670Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-spellcheckpy-pypi-34fdc06ee623aeb6 2026-10-30T10:29:47.999Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tablates-pypi-0bd03c118f1d6a1d 2026-10-30T10:29:44.744Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tableapy-pypi-7052f37d9b0ce92b 2026-10-30T10:29:40.900Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tableapys-pypi-31b9e4eeb38d3f94 2026-10-30T10:22:20.029Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tableasets-pypi-1ca90082cd9fcd5b 2026-10-30T10:22:14.377Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tableate-pypi-c0a3b3ecdeebd6c4 2026-10-30T10:22:11.197Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tableates-pypi-483acc8cef0d28b9 2026-10-30T10:22:07.749Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tableautes-pypi-036b96084b4a6347 2026-10-30T10:22:04.009Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tablescene-pypi-8613bdf5ec89bdba 2026-10-30T10:22:00.551Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tableshow-pypi-f17f38cba64eabed 2026-10-30T10:21:57.126Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tabletas-pypi-fcd76aa0b8c6f07c 2026-10-30T10:21:54.113Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tabletes-pypi-5bb330ccda5a5b31 2026-10-30T10:21:50.481Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tablixs-pypi-3dc902c20dd3c7ee 2026-10-30T10:21:46.221Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tabulapys-pypi-69556f17974102e4 2026-10-30T10:21:43.235Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-tabullates-pypi-c2035dd4b3d6cd92 2026-10-30T10:21:40.208Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-c2ad7a8e7848fe79 2026-10-30T10:21:36.948Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images-rpms-bug-fix-and-enhancement-update-e8a16825d39b6ba6 2026-10-30T10:21:31.906Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-quay-312-5d50468e13630392 2026-10-30T10:21:27.956Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-quay-312-66460c0d7e6df50f 2026-10-30T10:21:15.817Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-quay-31310-21eb6815340fde35 2026-10-30T10:21:11.777Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-quay-312-ca0619c7e5f2a0b5 2026-10-30T10:21:07.768Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-virtualization-v414-images-f83c48c3d2b77a57 2026-10-30T10:20:59.912Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-virtualization-v419-images-8d2d9198436b461a 2026-10-30T10:20:54.673Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-virtualization-v420-images-5869babafcbb272c 2026-10-30T10:20:50.826Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-virtualization-v416-images-ba3b96e90a60c684 2026-10-30T10:20:45.463Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-new-container-image-rhceph-90-82498b2d67216348 2026-10-30T10:20:40.815Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-85268-cwe-79-cross-site-scripting-in-google-cloud-identity-platform-and-firebase-03b2a250dd85d3aa 2026-10-30T10:30:52.170Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-openshift-virtualization-v420-images-833cbc72050f1bcc 2026-10-30T10:30:48.477Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-22105-cwe-1392-use-of-default-credentials-in-delta-electronics-delta-ufc500-9c47cce7a054c845 2026-10-30T10:46:04.404Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-22109-cwe-1392-use-of-default-credentials-in-delta-electronics-delta-ufc500-9cb160ec548c74f0 2026-10-30T10:45:59.458Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-22110-cwe-306-missing-authentication-for-critical-functionality-in-delta-electronics-delta-e502979303ec1b38 2026-10-30T10:45:56.139Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-22114-cwe-307-improper-restriction-of-excessive-authentication-attempts-in-delta-electronics-273c62788c67c6f3 2026-10-30T10:46:28.691Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-31704-cwe-78-os-command-injection-in-dahua-intelligent-connection-center-29751d12dcd32fd8 2026-10-30T10:45:52.991Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-81726-external-control-of-file-name-or-path-in-nltk-d7cc11e56f25bd85 2026-10-30T11:01:10.971Z weekly 0.8 https://radar.offseq.com/threat/drupal-commerce-core-vulnerability-exploited-against-online-stores-180246a04cd9dd22 2026-10-30T11:14:23.883Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-116366-cwe-190-integer-overflow-or-wraparound-in-clickhouse-506c632bd0d8221b 2026-10-30T11:16:01.093Z weekly 0.9 https://radar.offseq.com/threat/malicious-code-in-stdid-nyxprobe-pypi-abcc66139d5c970b 2026-10-30T12:43:49.626Z weekly 0.7 https://radar.offseq.com/threat/wasmtime-wasi-wasip3-udp-send-can-deliver-a-datagram-to-an-address-only-allowed-for-receiving-b40753196706b096 2026-10-30T11:16:41.987Z weekly 0.7 https://radar.offseq.com/threat/wasi-http-p2-outgoing-content-length-can-be-invalid-or-not-match-body-475bd30620a2ad16 2026-10-30T11:16:37.843Z weekly 0.7 https://radar.offseq.com/threat/wasmtime-typed-functions-with-i31-or-nullref-arguments-may-panic-due-to-insufficient-type-check-b5da65a33c0c4846 2026-10-30T11:16:33.789Z weekly 0.7 https://radar.offseq.com/threat/wasmtime-cross-engine-type-confusion-with-host-created-struct-types-with-supertypes-897bb8623f264e88 2026-10-30T11:16:30.170Z weekly 0.7 https://radar.offseq.com/threat/wasmtime-unchecked-memory-usage-in-transferring-borrowed-resources-between-components-cf72fe9a6c9d3c6e 2026-10-30T11:16:26.506Z weekly 0.7 https://radar.offseq.com/threat/nix-nar-decoderunpack-writes-archive-entries-outside-the-destination-directory-path-traversal-a4181823d303db09 2026-10-30T11:15:56.950Z weekly 0.8 https://radar.offseq.com/threat/vega-unsecured-configuration-interface-allows-unauthorized-access-leading-to-privilege-escalation-886444770ced124e 2026-10-30T11:32:14.175Z weekly 0.8 https://radar.offseq.com/threat/keepassxc-mehrere-schwachstellen-ermglichen-denial-of-service-und-offenlegung-7663ac5c8c314cac 2026-10-30T11:32:55.145Z weekly 0.7 https://radar.offseq.com/threat/drupal-erweiterungen-mehrere-schwachstellen-7f6c246d07054214 2026-10-30T11:32:52.330Z weekly 0.7 https://radar.offseq.com/threat/ssa-443410-node2shell-vulnerability-in-industrial-edge-management-applications-a80cb3341e8e3acc 2026-10-30T11:32:49.696Z weekly 0.8 https://radar.offseq.com/threat/ssa-898633-node2shell-vulnerability-in-palo-alto-networks-pan-os-on-ruggedcom-ape1808-devices-fb20d7b682c240e9 2026-10-30T11:32:46.685Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119146-buffer-copy-without-checking-size-of-input-classic-buffer-overflow-in-proftpd-project-6be186fc72b84a4c 2026-10-30T11:46:18.233Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119147-incorrect-authorization-in-proftpd-project-proftpd-ab32f889ac079151 2026-10-30T12:18:00.990Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119364-improper-link-resolution-before-file-access-link-following-in-proftpd-project-proftpd-b99e0be57dc866f3 2026-10-30T12:03:23.666Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119371-uncontrolled-recursion-in-sqlite-a5f98232e5d0868e 2026-10-30T12:03:19.310Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119372-use-after-free-in-sqlite-eac9f70593c81040 2026-10-30T12:03:16.128Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119373-out-of-bounds-write-in-sqlite-9c717ccc720e5595 2026-10-30T12:02:33.499Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119374-out-of-bounds-write-in-sqlite-6b0bb362a62a00e4 2026-10-30T12:02:30.489Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119375-use-of-uninitialized-resource-in-sqlite-530caac8533fb52c 2026-10-30T12:03:12.586Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119376-uncontrolled-recursion-in-sqlite-67a42cff0ae4ca07 2026-10-30T12:03:09.338Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119377-incorrect-authorization-in-sqlite-af5ddd32c4e2a07a 2026-10-30T12:03:06.035Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119378-use-after-free-in-sqlite-9fbd7bb12ed9d865 2026-10-30T12:03:02.558Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119379-out-of-bounds-write-in-sqlite-b1b53805547d9a7e 2026-10-30T12:02:26.969Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119407-cross-site-request-forgery-csrf-in-element-hq-element-web-d795e2ad3ccf1357 2026-10-30T11:52:01.408Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119408-improper-isolation-or-compartmentalization-in-n8n-io-n8n-a5a719e3a92234aa 2026-10-30T11:51:58.373Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119409-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-5821db6c77582fe3 2026-10-30T11:51:54.830Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119414-incorrect-authorization-in-bitwarden-server-52d5efeae7f418f0 2026-10-30T11:51:51.116Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119415-improper-neutralization-of-crlf-sequences-crlf-injection-in-cakephp-e2d8708ea1389be5 2026-10-30T11:51:47.778Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119416-origin-validation-error-in-cakephp-06fdec1e62bca672 2026-10-30T11:51:44.575Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119417-improper-neutralization-of-crlf-sequences-crlf-injection-in-cakephp-142e885396b15ab6 2026-10-30T11:51:41.425Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119418-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-5bf5b84650b29674 2026-10-30T11:51:01.119Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-119419-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-c5b386331ec51825 2026-10-30T11:50:57.800Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-119420-authentication-bypass-using-an-alternate-path-or-channel-in-getlago-lago-441496aaa6a109fa 2026-10-30T11:50:53.736Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119421-authorization-bypass-through-user-controlled-key-in-juspay-hyperswitch-9d2a14fe711aec4b 2026-10-30T11:50:50.558Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119422-insufficient-verification-of-data-authenticity-in-juspay-hyperswitch-b6e4d8f3fc6d7657 2026-10-30T11:50:47.132Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119423-improper-output-neutralization-for-logs-in-opnsense-core-a162f596617b85c9 2026-10-30T11:51:36.234Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119424-improper-neutralization-of-crlf-sequences-crlf-injection-in-opnsense-core-921912c8fcbbdb13 2026-10-30T11:51:32.434Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119425-authentication-bypass-by-spoofing-in-opnsense-core-f79aa6268ee33765 2026-10-30T11:51:29.260Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119426-cross-site-request-forgery-csrf-in-phpmyadmin-55fe148add38044d 2026-10-30T11:50:43.414Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119427-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-371250cb77d07b57 2026-10-30T11:51:25.098Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119428-server-side-request-forgery-ssrf-in-phpmyadmin-883e17a0b87989a5 2026-10-30T11:51:21.655Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119429-unverified-password-change-in-phpmyadmin-6a21e7b81eb33d9a 2026-10-30T11:51:18.346Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119545-server-side-request-forgery-ssrf-in-forgejo-e8c93f2046d6762a 2026-10-30T11:51:15.023Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119546-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-forgejo-0b914b5ff33ea2ad 2026-10-30T11:49:13.823Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119547-authorization-bypass-through-user-controlled-key-in-forgejo-8ed94717728e9c6b 2026-10-30T11:49:10.372Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119548-authorization-bypass-through-user-controlled-key-in-getlago-lago-a74fcc908e5ac6f8 2026-10-30T11:49:06.277Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119549-server-side-request-forgery-ssrf-in-jellyfin-fc7cd6ec9a986873 2026-10-30T11:48:17.701Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119550-missing-authorization-in-jellyfin-a9af8c64fe5e9f32 2026-10-30T11:49:03.201Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119551-missing-authorization-in-jellyfin-a0a8112ff20be456 2026-10-30T11:48:14.618Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119552-time-of-check-time-of-use-toctou-race-condition-in-louislam-uptime-kuma-88e8bb860a318be6 2026-10-30T11:49:00.417Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119553-relative-path-traversal-in-moodle-project-moodle-f112cf424e7ab041 2026-10-30T11:48:11.589Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119554-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-d350db1fc82ff387 2026-10-30T11:48:56.788Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119555-authorization-bypass-through-user-controlled-key-in-moodle-project-moodle-3c881249b9eff88d 2026-10-30T11:48:52.476Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119556-missing-authorization-in-moodle-project-moodle-034065f220b4e870 2026-10-30T11:48:48.168Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119557-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-n8n-io-ca85ca1da123d53d 2026-10-30T11:48:08.483Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119558-improper-enforcement-of-behavioral-workflow-in-opencart-60bae37eb0cc23f3 2026-10-30T11:48:44.262Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119559-improper-certificate-validation-in-litespeedtech-openlitespeed-7b942d35d48bc7b6 2026-10-30T11:48:05.184Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119560-improper-neutralization-of-crlf-sequences-crlf-injection-in-opnsense-core-3cb0b4e594881e02 2026-10-30T11:48:41.373Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119561-improper-verification-of-cryptographic-signature-in-phpmyadmin-884a4b940b2c89d5 2026-10-30T11:48:01.913Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119562-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-f6f9d7289f1359d6 2026-10-30T11:48:38.411Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119563-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-8b1ee12c66e7b920 2026-10-30T11:48:35.646Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119564-insertion-of-sensitive-information-into-sent-data-in-plausible-plausible-analytics-51821fa9956a982f 2026-10-30T11:48:32.567Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119565-improperly-controlled-modification-of-dynamically-determined-object-attributes-in-f46dc8503e75df78 2026-10-30T11:48:29.788Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119566-insufficiently-protected-credentials-in-prometheus-26411896008f4865 2026-10-30T11:48:26.952Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119567-incomplete-list-of-disallowed-inputs-in-vsftpd-6acb86b920a21be8 2026-10-30T11:48:23.596Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119568-improper-verification-of-source-of-a-communication-channel-in-vsftpd-63d53552c699c224 2026-10-30T11:47:59.072Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-119586-improper-neutralization-of-special-elements-used-in-a-command-command-injection-in-dc657fc2f9745a2c 2026-10-30T11:47:55.042Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119591-uncontrolled-recursion-in-sqlite-053d82540b0523ea 2026-10-30T11:48:20.652Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-68391-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-arketeam-protectelmaj-06f48857e97e9f9b 2026-10-30T11:51:10.847Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-68392-cwe-863-incorrect-authorization-in-arketeam-protectelmaj-5031fc9898290f15 2026-10-30T11:51:07.608Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-68393-cwe-89-sql-injection-in-arketeam-protectelmaj-547e7c239d7f8295 2026-10-30T11:50:39.837Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-68394-cwe-89-sql-injection-in-arketeam-protectelmaj-eadeb61e6a0f1881 2026-10-30T11:50:36.402Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-68395-cwe-79-cross-site-scripting-in-arketeam-protectelmaj-ec0c17419bc58242 2026-10-30T11:51:04.753Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-101210-cwe-78-os-command-injection-in-dell-openmanage-enterprise-c2ac885a1d8139e2 2026-10-30T12:05:26.977Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-101213-cwe-269-improper-privilege-management-in-dell-openmanage-enterprise-75f0b62f9b75c3c8 2026-10-30T12:05:23.901Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-110970-cwe-1428-reliance-on-http-instead-of-https-in-zakad-ubezpiecze-spoecznych-patnik-608facd8dfbe5b7f 2026-10-30T12:05:41.870Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-110971-cwe-261-weak-encoding-for-password-in-zakad-ubezpiecze-spoecznych-patnik-4ebd71bcf5c95d72 2026-10-30T12:05:21.198Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-110972-cwe-603-use-of-client-side-authentication-in-zakad-ubezpiecze-spoecznych-patnik-ff1da267251d78fc 2026-10-30T12:05:18.130Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-101214-cwe-78-os-command-injection-in-dell-openmanage-enterprise-d891933b354d8369 2026-10-30T12:05:14.878Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-111505-cwe-78-os-command-injection-in-dell-openmanage-enterprise-c9d8096ca72a86fb 2026-10-30T12:04:41.923Z weekly 0.8 https://radar.offseq.com/threat/fresh-wordpress-vulnerability-in-attackers-crosshairs-12a21a9565ccf071 2026-10-30T12:17:38.063Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-101209-cwe-918-server-side-request-forgery-in-dell-openmanage-enterprise-16af2606d74c1f6b 2026-10-30T12:22:44.721Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-105924-cwe-476-null-pointer-dereference-in-qt-qt-73db7bb9404b53d6 2026-10-30T12:22:41.843Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-111504-cwe-88-argument-injection-in-dell-openmanage-enterprise-f8e3781e7907191a 2026-10-30T12:22:38.395Z weekly 0.8 https://radar.offseq.com/threat/orion-llvm-introduces-timing-vulnerable-optimizations-into-ml-kem-and-ml-dsa-operations-intended-to-be-e8fbfb9d9a9c5f08 2026-10-30T12:22:35.174Z weekly 0.8 https://radar.offseq.com/threat/sn-releases-extractreleasearchive-writes-archive-entries-without-a-path-traversal-check-zip-slip-07c20397232ce526 2026-10-30T12:22:13.611Z weekly 0.8 https://radar.offseq.com/threat/orion-blake2b-produces-wrong-tag-when-using-reset-with-a-different-length-key-37a75cdd04fc6d75 2026-10-30T12:22:30.765Z weekly 0.7 https://radar.offseq.com/threat/kwetsbaarheden-verholpen-in-dell-powerprotect-data-domain-2acece1c7e9b14e5 2026-10-30T12:22:27.437Z weekly 0.8 https://radar.offseq.com/threat/integer-overflow-or-wraparound-in-gitlab-cve-2026-97229-9ca0ed793ae21ce4 2026-10-30T12:21:57.718Z weekly 0.9 https://radar.offseq.com/threat/helm-fileslines-denial-of-service-via-empty-chart-files-cve-2026-63308-f988cd47037b6359 2026-10-30T12:22:23.444Z weekly 0.7 https://radar.offseq.com/threat/seaweedfs-hard-coded-ssh-host-key-can-be-presented-by-certain-standalone-sftp-helm-deployments-cve-d73608342d6f0615 2026-10-30T12:21:54.138Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-111501-cwe-307-improper-restriction-of-excessive-authentication-attempts-in-dell-openmanage-a14cf2c4ad7d933c 2026-10-30T12:20:20.402Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-111502-cwe-522-insufficiently-protected-credentials-in-dell-openmanage-enterprise-267c6f55efbdda6f 2026-10-30T12:16:50.901Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-111503-cwe-89-sql-injection-in-dell-openmanage-enterprise-27f3720964d54ddb 2026-10-30T12:10:50.917Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-112374-cross-site-request-forgery-csrf-in-fossbilling-01ace1d814dd7572 2026-10-30T12:10:37.508Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-87768-cwe-407-inefficient-algorithmic-complexity-in-datetime-lite-06a43d42c2441862 2026-10-30T12:25:21.054Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-91917-cwe-20-improper-input-validation-in-dell-openmanage-enterprise-7734fa167abeac09 2026-10-30T12:24:20.449Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-38006-net-mctp-dont-access-ifaindex-when-missing-in-linux-kernel-c60cb9222e23b469 2026-10-30T12:21:31.744Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38045-wifi-iwlwifi-fix-debug-actions-order-in-linux-kernel-91c8e195e63ded78 2026-10-30T12:21:35.989Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38059-btrfs-avoid-null-pointer-dereference-if-no-valid-csum-tree-in-linux-kernel-ca3a8028733ea6db 2026-10-30T12:21:37.047Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38081-spi-rockchip-fix-register-out-of-bounds-access-in-linux-kernel-a997f2aa6ee8fb7a 2026-10-30T12:21:40.233Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38127-ice-fix-tx-scheduler-error-handling-in-xdp-callback-in-linux-kernel-8f715f3f8932d76a 2026-10-30T12:21:42.491Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-38182-ublk-santizize-the-arguments-from-userspace-when-adding-a-device-in-linux-kernel-2432fd51a5f3b665 2026-10-30T12:21:44.638Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38195-loongarch-fix-panic-caused-by-null-pmd-in-hugepteoffset-in-linux-kernel-201ac66100d35957 2026-10-30T12:21:45.698Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38234-schedrt-fix-race-in-pushrttask-in-linux-kernel-29952d1a6bb5d2d5 2026-10-30T12:21:47.856Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-38244-smb-client-fix-potential-deadlock-when-reconnecting-channels-in-linux-kernel-3c64717049a3d097 2026-10-30T12:21:48.920Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-38246-bnxt-properly-flush-xdp-redirect-lists-in-linux-kernel-47775158aee6811e 2026-10-30T12:21:49.989Z weekly 0.9 https://radar.offseq.com/threat/cve-2025-38248-bridge-mcast-fix-use-after-free-during-router-port-configuration-in-linux-kernel-af79a0f5bb418bc7 2026-10-30T12:21:51.057Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-38283-hisiaccvfiopci-bugfix-live-migration-function-without-vf-device-driver-in-linux-kernel-81ac31a6f418c003 2026-10-30T12:21:54.251Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-38373-ibmlx5-fix-potential-deadlock-in-mr-deregistration-in-linux-kernel-64f593d93bc82654 2026-10-30T12:21:57.686Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38429-bus-mhi-ep-update-read-pointer-only-after-buffer-is-written-in-linux-kernel-72d732ea1147ddde 2026-10-30T12:21:58.744Z weekly 0.9 https://radar.offseq.com/threat/cve-2025-38524-rxrpc-fix-recv-recv-race-of-completed-call-in-linux-kernel-c4bdf6dfb3c938e1 2026-10-30T12:22:00.883Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-38531-iio-common-stsensors-fix-use-of-uninitialize-device-structs-in-linux-kernel-1d5f966a12254fd7 2026-10-30T12:22:01.935Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38544-rxrpc-fix-bug-due-to-prealloc-collision-in-linux-kernel-d443dca5d91eb321 2026-10-30T12:22:03.026Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38590-netmlx5e-remove-skb-secpath-if-xfrm-state-is-not-found-in-linux-kernel-027dc15bf3bca79a 2026-10-30T12:22:05.185Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-38615-fsntfs3-cancle-set-bad-inode-after-removing-name-fails-in-linux-kernel-6efcc45b70554a66 2026-10-30T12:22:08.400Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-38632-pinmux-fix-race-causing-muxowner-null-with-active-muxusecount-in-linux-kernel-57486144d8249a1c 2026-10-30T12:22:09.468Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38675-xfrm-state-initialize-stateptrs-earlier-in-xfrmstatefind-in-linux-kernel-f533ed508300934c 2026-10-30T12:22:11.594Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-38692-exfat-add-cluster-chain-loop-check-for-dir-in-linux-kernel-30f1696067997fc2 2026-10-30T12:22:12.663Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38709-loop-avoid-updating-block-size-under-exclusive-owner-in-linux-kernel-85a46f7a14ddf5fe 2026-10-30T12:22:14.787Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-38728-smb3-fix-for-slab-out-of-bounds-on-mount-to-ksmbd-in-linux-kernel-d8607aa2cc492156 2026-10-30T12:22:18.053Z weekly 0.9 https://radar.offseq.com/threat/cve-2025-38734-netsmc-fix-uaf-on-smcsk-after-smclistenout-in-linux-kernel-d29e805d66e5e00c 2026-10-30T12:22:19.124Z weekly 0.9 https://radar.offseq.com/threat/cve-2025-39720-ksmbd-fix-refcount-leak-causing-resource-not-released-in-linux-kernel-0cf26fd5830ef16a 2026-10-30T12:22:22.322Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-39726-s390ism-fix-concurrency-management-in-ismcmd-in-linux-kernel-1faa4db409baa4ec 2026-10-30T13:32:56.649Z weekly 0.9 https://radar.offseq.com/threat/cve-2025-39744-rcu-fix-rcureadunlock-deadloop-due-to-irq-work-in-linux-kernel-2d4be8dc6de4ec3d 2026-10-30T12:22:24.618Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-39767-loongarch-optimize-module-load-time-by-optimizing-pltgot-counting-in-linux-kernel-5494b8002b49ada9 2026-10-30T12:22:26.759Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-39797-xfrm-duplicate-spi-handling-in-linux-kernel-63899943b83f2b5c 2026-10-30T12:22:28.883Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-39886-bpf-tell-memcg-to-use-allowspinningfalse-path-in-bpftimerinit-in-linux-kernel-5864e06c70f592e1 2026-10-30T12:22:35.281Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-39932-smb-client-let-smbddestroy-call-disableworksyncinfo-postsendcreditswork-in-linux-kernel-c62f7c2757cedbdf 2026-10-30T13:32:52.946Z weekly 0.9 https://radar.offseq.com/threat/cve-2025-39952-wifi-wilc1000-avoid-buffer-overflow-in-wid-string-configuration-in-linux-kernel-887c3bb73dbad9a3 2026-10-30T13:32:49.424Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-39965-xfrm-xfrmallocspi-shouldnt-use-0-as-spi-in-linux-kernel-25d40f689eacc0f9 2026-10-30T13:32:45.692Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-40067-fsntfs3-reject-index-allocation-if-bitmap-is-empty-but-blocks-exist-in-linux-kernel-482fd7ef7c2f50a6 2026-10-30T13:32:41.411Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-40071-tty-ngsm-dont-block-input-queue-by-waiting-msc-in-linux-kernel-3e47a7fe107d6650 2026-10-30T12:22:47.159Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-40077-f2fs-fix-to-avoid-overflow-while-left-shift-operation-in-linux-kernel-ce3d3b8f023ea673 2026-10-30T12:22:49.284Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-40135-ipv6-use-rcu-in-ip6xmit-in-linux-kernel-dd930d577f5db9b9 2026-10-30T12:47:54.151Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-40137-f2fs-fix-to-truncate-first-page-in-error-path-of-f2fstruncate-in-linux-kernel-5c6c415852a15a77 2026-10-30T12:22:52.489Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-40160-xenevents-return-eexist-for-bound-virqs-in-linux-kernel-4bdd70d407fb9d8b 2026-10-30T12:22:54.628Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-40268-cifs-client-fix-memory-leak-in-smb3fscontextparseparam-in-linux-kernel-af35d3dfe0415513 2026-10-30T12:22:57.829Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-40311-accelhabanalabs-support-mapping-cb-with-vmalloc-backed-coherent-memory-in-linux-kernel-de6cea010fdcb3a7 2026-10-30T12:22:59.945Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-40328-smb-client-fix-potential-uaf-in-smb2closecachedfid-in-linux-kernel-a085cd888ab7de97 2026-10-30T12:47:50.709Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-40337-net-stmmac-correctly-handle-rx-checksum-offload-errors-in-linux-kernel-4a379de9c45cfd45 2026-10-30T12:47:47.398Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-68178-blk-cgroup-fix-possible-deadlock-while-configuring-policy-in-linux-kernel-251cf2f1a2fb51da 2026-10-30T12:23:05.241Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-68183-ima-dont-clear-imadigsig-flag-when-setting-or-removing-non-ima-xattr-in-linux-kernel-5a9285b2455257a4 2026-10-30T12:47:43.430Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-68219-cifs-fix-memory-leak-in-smb3fscontextparseparam-error-path-in-linux-kernel-0574eadf58a6d743 2026-10-30T12:23:09.486Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-68320-lan966x-fix-sleeping-in-atomic-context-in-linux-kernel-3a70374a026f154d 2026-10-30T12:47:38.859Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-68321-pagepool-always-add-gfpnowarn-for-atomic-allocations-in-linux-kernel-75341648c3e69d88 2026-10-30T12:47:35.739Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-68342-can-gsusb-gsusbreceivebulkcallback-check-actuallength-before-accessing-data-in-linux-1d3fbb417d8c2027 2026-10-30T12:23:14.781Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-68379-rdmarxe-fix-null-deref-on-srq-rqqueue-after-resize-failure-in-linux-kernel-c4bdfcbce573d31f 2026-10-30T12:47:32.894Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-68809-ksmbd-vfs-fix-race-on-mflags-in-vfscache-in-linux-kernel-06c56d2289b9d4f8 2026-10-30T12:47:28.467Z weekly 0.9 https://radar.offseq.com/threat/cve-2025-71138-drmmsmdpu-add-missing-null-pointer-check-for-pingpong-interface-in-linux-kernel-0f1ba2743c13a4a1 2026-10-30T12:23:28.092Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-71152-net-dsa-properly-keep-track-of-conduit-reference-in-linux-kernel-a2d08cd07cae79f1 2026-10-30T12:23:29.156Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-71184-btrfs-fix-null-dereference-on-root-when-tracing-inode-eviction-in-linux-kernel-7c186ba3d93347ea 2026-10-30T12:23:30.217Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-71193-phy-qcom-qusb2-fix-null-pointer-dereference-on-early-suspend-in-linux-kernel-8adcc1747cb1708b 2026-10-30T12:23:31.285Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-71198-iio-imu-stlsm6dsx-fix-iiochanspec-for-sensors-without-event-detection-in-linux-kernel-8a286998d90e26f9 2026-10-30T12:23:32.365Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-71289-fsntfs3-handle-attrsetsize-errors-when-truncating-files-in-linux-kernel-3742c728806136bf 2026-10-30T12:35:29.812Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-23050-pnfs-fix-a-deadlock-when-returning-a-delegation-during-open-in-linux-kernel-eaf7e4bc80a615e1 2026-10-30T12:23:41.926Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-23118-rxrpc-fix-data-race-warning-and-potential-loadstore-tearing-in-linux-kernel-4c500550765a44e8 2026-10-30T12:23:43.092Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-23138-tracing-add-recursion-protection-in-kernel-stack-trace-recording-in-linux-kernel-83fa70ad4e106c27 2026-10-30T12:23:45.218Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-23330-nfc-nci-complete-pending-data-exchange-on-device-close-in-linux-kernel-88ddaf268d79387c 2026-10-30T12:48:57.374Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-23355-ata-libata-cancel-pending-work-after-clearing-deferredqc-in-linux-kernel-f1e5f799573aef72 2026-10-30T12:48:54.488Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-23374-blktrace-fix-thiscpureadwrite-in-preemptible-context-in-linux-kernel-333fefd78456b682 2026-10-30T12:48:51.314Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-23419-netrds-fix-circular-locking-dependency-in-rdstcptune-in-linux-kernel-aed2bc06103b70bc 2026-10-30T12:35:25.249Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-23451-bonding-prevent-potential-infinite-loop-in-bondheaderparse-in-linux-kernel-f3ca2a0e666a1a4a 2026-10-30T12:35:20.676Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-23465-btrfs-log-new-dentries-when-logging-parent-dir-of-a-conflicting-inode-in-linux-kernel-628b5d06d3493575 2026-10-30T12:48:47.873Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-31432-ksmbd-fix-oob-write-in-queryinfo-for-compound-requests-in-linux-kernel-0aabf0be4a910f09 2026-10-30T12:35:16.507Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-31655-pmdomain-imx8mp-blk-ctrl-keep-the-nochdcp-clock-enabled-in-linux-kernel-f012bb720f244158 2026-10-30T12:48:44.544Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-31707-ksmbd-validate-response-sizes-in-ipcvalidatemsg-in-linux-kernel-96e5d6980d15ce33 2026-10-30T12:35:10.517Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-43010-bpf-reject-sleepable-kprobemulti-programs-at-attach-time-in-linux-kernel-b1c3b33479097559 2026-10-30T12:48:41.350Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-43119-bluetooth-hcisync-annotate-data-races-around-hdev-reqstatus-in-linux-kernel-8b088b3dada47fb9 2026-10-30T12:48:38.406Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-43129-ima-verify-the-previous-kernels-ima-buffer-lies-in-addressable-ram-in-linux-kernel-8fff546ce244e698 2026-10-30T12:48:34.523Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-43167-xfrm-always-flush-state-and-policy-upon-netdevunregister-event-in-linux-kernel-48fef42fc7bcec8c 2026-10-30T12:48:31.114Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-43170-usb-dwc3-gadget-move-vbus-draw-to-workqueue-context-in-linux-kernel-ca8f91fb499b6812 2026-10-30T12:48:26.412Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-43220-iommuamd-serialize-sequence-allocation-under-concurrent-tlb-invalidations-in-linux-b10050195a78c15d 2026-10-30T12:48:23.080Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-43271-md-cluster-fix-null-pointer-dereference-in-processmetadataupdate-in-linux-kernel-992311b6c1ba885c 2026-10-30T12:48:19.199Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-43344-perfx86inteluncore-fix-die-id-init-and-look-up-bugs-in-linux-kernel-cae07afae7f32f17 2026-10-30T12:48:13.806Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-43413-scsi-hisisas-fix-null-pointer-exception-during-userscan-in-linux-kernel-1bfe74752f003b3e 2026-10-30T12:48:08.124Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-43419-ceph-fix-memory-leaks-in-cephmdscbuildpath-in-linux-kernel-de65dd75e944c18a 2026-10-30T12:48:04.739Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-43490-ksmbd-validate-inherited-ace-sid-length-in-linux-kernel-200c1d9a1136ac14 2026-10-30T12:35:06.419Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-45855-ata-libata-scsi-avoid-non-ncq-command-starvation-in-linux-kernel-343e2b5f6672d07a 2026-10-30T12:48:01.187Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-45899-ext4-drop-extent-cache-when-splitting-extent-fails-in-linux-kernel-93ebaebf682747c8 2026-10-30T12:47:57.741Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-45957-rcu-fix-rcureadunlock-deadloop-due-to-softirq-in-linux-kernel-6438397b9a020fc7 2026-10-30T12:36:35.784Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-45985-ext4-dont-set-ext4getblocksconvert-when-splitting-before-submitting-io-in-linux-kernel-d9e09e48c098f400 2026-10-30T12:36:32.236Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-46000-rxrpc-fix-conn-level-packet-handling-to-unshare-response-packets-in-linux-kernel-82f1be2f52629564 2026-10-30T12:36:28.309Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-46012-rxrpc-fix-memory-leaks-in-rxkadverifyresponse-in-linux-kernel-1fdfa7ba6ae689e5 2026-10-30T12:36:25.215Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-46165-openvswitch-vport-fix-self-deadlock-on-release-of-tunnel-ports-in-linux-kernel-ac5551b1de8b4855 2026-10-30T12:36:21.305Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-46225-spi-rspi-fix-controller-deregistration-in-linux-kernel-4799b7aea4f83384 2026-10-30T12:36:16.744Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-46226-spi-fsl-fix-controller-deregistration-in-linux-kernel-0afec2fc8aec8d3b 2026-10-30T12:36:13.502Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-46229-drmamdkfd-clear-vram-on-allocation-to-prevent-stale-data-exposure-in-linux-kernel-4e3a9ae85e45d65f 2026-10-30T12:36:10.791Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-46265-rdmahns-fix-wqmemreclaim-warning-in-linux-kernel-f6022c6d9bea6e4c 2026-10-30T12:35:02.496Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-46312-media-videobuf2-set-vmaflags-in-vb2dmasgmmap-in-linux-kernel-c220602d14176b8f 2026-10-30T12:36:05.999Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-52936-crypto-jitterentropy-replace-long-held-spinlock-with-mutex-in-linux-kernel-40333a0f72d509b7 2026-10-30T12:36:01.475Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-52961-ceph-fix-bugon-in-cephbuildxattrsblob-due-to-stale-blob-size-in-linux-kernel-a3117accfc1915ce 2026-10-30T12:35:57.888Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-53027-fsntfs3-fix-missing-run-load-for-vcn0-in-attrdatagetblocklocked-in-linux-kernel-d36e7a4f61fac542 2026-10-30T12:35:54.308Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-53083-bpf-fix-rcu-stall-in-bpffdarraymapclear-in-linux-kernel-e81a00f2c555ffe3 2026-10-30T12:35:49.042Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-53237-gpio-mvebu-fix-null-pointer-dereference-in-suspendresume-in-linux-kernel-9f88c58b33fc5c86 2026-10-30T12:35:45.967Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-53345-kvm-dont-warn-if-memory-is-dirtied-without-a-vcpu-when-the-vm-is-dying-in-linux-kernel-bb476e6d4abc8b49 2026-10-30T12:35:42.323Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-53353-hsr-remove-warnonce-in-hsraddrisself-in-linux-kernel-99a3447557420ba4 2026-10-30T12:35:38.318Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-53376-drmamdkfd-add-upper-bound-check-for-numofnodes-in-linux-kernel-7fa9f9e156bee7a8 2026-10-30T12:35:34.419Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-63812-f2fs-fix-incorrect-finoextent-handling-in-destroyextentnode-in-linux-kernel-5d403428a456f0f0 2026-10-30T12:34:59.044Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-116130-cwe-626-null-byte-interaction-error-poison-null-byte-in-http-parser-xs-0a7645f05b7d48a6 2026-10-30T13:34:03.323Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118988-cwe-22-path-traversal-in-callbackery-cc426270370ebb3c 2026-10-30T13:33:59.755Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-63826-fbdev-fix-use-after-free-in-storemodes-in-linux-kernel-85b797db01963e12 2026-10-30T13:33:55.988Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-63871-bluetooth-iso-fix-data-race-on-isopi-fields-in-hcigetroute-calls-in-linux-kernel-d9fc0aa7dc915289 2026-10-30T13:33:51.974Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-63959-usb-typec-tcpmtcpcimaxim-validate-header-ndo-against-rxbytecnt-in-linux-kernel-5600fe89ac9a47e5 2026-10-30T13:33:48.350Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-64144-bluetooth-btmtk-fix-urb-setuppacket-leak-in-error-paths-in-linux-kernel-fe0952791313862d 2026-10-30T13:33:45.327Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-64163-testkprobes-clear-kprobes-between-test-runs-in-linux-kernel-6d1610f540f5d3b8 2026-10-30T13:33:41.587Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-64345-usb-gadget-fprinter-take-kref-only-for-successful-open-in-linux-kernel-1e691813833ee5a9 2026-10-30T13:33:36.955Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-64348-usb-free-iso-schedules-on-failed-submit-in-linux-kernel-fa09096ff6835907 2026-10-30T13:33:32.790Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-64392-ksmbd-use-opener-credentials-for-delete-on-close-in-linux-kernel-0c29d98a2df20aea 2026-10-30T13:32:35.359Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-64424-netpoll-fix-a-use-after-free-on-shutdown-path-in-linux-kernel-f3896ee02d53319a 2026-10-30T13:33:27.597Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-64525-xfrm-move-policybydst-rcu-sync-from-per-netns-exit-to-preexit-in-linux-kernel-33e2e9527e5c209c 2026-10-30T13:33:24.046Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-68102-drmamdgpu-fix-aperture-mapping-leak-in-linux-kernel-ac5f35c0f1d807f8 2026-10-30T13:33:19.592Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-68416-mtd-fix-double-free-and-warnon-in-addmtddevice-error-paths-in-linux-kernel-6e4bd3d5b2b554ba 2026-10-30T13:33:16.172Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-68445-drmvc4-prevent-shader-bo-mappings-from-becoming-writable-in-linux-kernel-b7fb52397dfa1901 2026-10-30T13:32:31.353Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-68449-ata-satadwc460ex-fix-infinite-loop-in-ncq-tag-completion-bit-scanning-in-linux-kernel-70834b87bbfd37d9 2026-10-30T13:33:11.604Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-72007-pmdomain-imx-fix-imx8mp-vc8000e-power-up-sequence-in-linux-kernel-2239b8d7683f4977 2026-10-30T13:33:08.148Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-72028-riscv-probes-save-original-sp-in-rethook-trampoline-in-linux-kernel-27f144489e5a1b97 2026-10-30T13:33:03.798Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-72106-dm-ioctl-fix-a-possible-overflow-in-listversiongetinfo-in-linux-kernel-bac6b00ebbdd1251 2026-10-30T13:33:00.192Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-72144-platformx86-dell-laptop-fix-missing-cleanups-in-init-error-path-in-linux-kernel-f1c60fcbda5a194a 2026-10-30T13:32:27.165Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-72147-dmaengine-dw-edma-pcie-reject-devices-without-driver-data-in-linux-kernel-412294d3e4a64f25 2026-10-30T13:20:40.246Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-72254-netfilter-nftfib-reject-fib-expression-on-the-netdev-egress-hook-in-linux-kernel-a140486a6faefa1d 2026-10-30T13:20:36.359Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-72336-bluetooth-6lowpan-hold-l2cap-conn-across-debugfs-control-in-linux-kernel-cea7333d76a7f524 2026-10-30T13:20:32.250Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-72338-netsched-actpedit-fix-toctou-heap-oob-write-in-tc-offload-in-linux-kernel-c650d935394caf08 2026-10-30T13:20:28.542Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-72379-fs-refuse-otmpfile-creation-with-an-unmapped-fsuid-or-fsgid-in-linux-kernel-454ae5082aeb54f2 2026-10-30T13:20:24.576Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-72382-ksmbd-reject-undersized-dacls-before-parsing-aces-in-linux-kernel-f77d9726303ea3fa 2026-10-30T13:19:37.432Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-72395-hwmon-pmbus-fix-passing-events-to-regulator-core-in-linux-kernel-00e86945341c7386 2026-10-30T13:19:33.549Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-72416-netfilter-nftcompat-ebtables-emulation-must-reject-non-bridge-targets-in-linux-kernel-5f2186aa7bb8baa6 2026-10-30T13:19:28.996Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-72470-fsntfs3-resize-log-onepagebuf-when-adopting-on-disk-page-size-in-linux-kernel-fd5e1a37b05d6090 2026-10-30T13:19:23.354Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-72472-nfs-use-nfsi-rwsem-to-protect-traversal-of-the-file-lock-list-in-linux-kernel-902955ed583b68f9 2026-10-30T13:19:19.265Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-74291-asoc-topology-check-pcm-and-dai-name-strings-before-use-in-linux-kernel-61107251a4ac9033 2026-10-30T13:20:19.835Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-74308-ext4-fix-kernel-bug-in-ext4writeinlinedataend-in-linux-kernel-9926bc51a636b8eb 2026-10-30T13:20:16.585Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-74339-alsa-seq-clear-variable-event-pointer-on-read-in-linux-kernel-da290d1da06988aa 2026-10-30T13:20:12.344Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-74341-wifi-wcn36xx-fix-heap-overflow-from-oversized-firmware-hal-response-in-linux-kernel-73d93a18b2883e83 2026-10-30T13:19:15.476Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-74391-tracing-bound-synthetic-field-strings-with-seqbuf-in-linux-kernel-09467fa7b969d3ca 2026-10-30T13:20:08.648Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-74397-ibmlx5-fix-transport-domain-rollback-and-initialize-lb-mutex-earlier-in-linux-kernel-e339dd267d47d052 2026-10-30T13:19:12.048Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-74401-dlm-fix-add-msg-handle-in-sendqueue-ordered-in-linux-kernel-adf77fadb07cd267 2026-10-30T13:19:08.237Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-74406-vxlan-fix-potential-null-ptr-deref-in-vxlangropreparereceive-in-linux-kernel-cfc3f6fae8754235 2026-10-30T13:19:04.914Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-74417-drmradeon-fix-integer-overflow-in-radeonalignpitch-in-linux-kernel-d9b50f4c930039a5 2026-10-30T13:18:59.406Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-74432-rxrpc-fix-leak-of-released-call-in-recvmsgmsgpeek-in-linux-kernel-db27a98c99942984 2026-10-30T13:18:56.142Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-74445-drmvmwgfx-reject-dxbindquery-without-a-dx-context-in-linux-kernel-1b3c94c13dc42ceb 2026-10-30T13:18:52.346Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-74599-mmptdump-always-stabilise-against-page-table-freeing-using-initmm-in-linux-kernel-597eb6cbf49fa9c2 2026-10-30T13:18:49.002Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-74672-mmvmalloc-acquire-initmm-lock-on-huge-vmap-to-avoid-ptdump-uaf-in-linux-kernel-a1f239281ea55198 2026-10-30T13:18:44.396Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-74700-netsched-clsapi-always-acquire-rtnllock-when-destroying-locked-classifiers-in-linux-af3823c9b7ab0171 2026-10-30T13:18:38.161Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-74739-netsched-clsu32-skip-hash-tables-in-u32bindclass-in-linux-kernel-4b2178ce31fb1616 2026-10-30T13:17:53.905Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-74740-netsched-actapi-fix-toctou-null-deref-on-a-gotochain-in-linux-kernel-48aa11c566dd8b45 2026-10-30T13:18:33.460Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-74753-perf-reject-exited-events-as-group-leaders-in-linux-kernel-1fa5b7346bbbebb4 2026-10-30T13:17:50.250Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80526-asoc-tas2562-validate-values-for-volume-writes-in-linux-kernel-274a403e95e93450 2026-10-30T13:17:46.242Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80551-s390vfioccw-ensure-first-idaw-remains-constant-in-linux-kernel-cc8748ba75d6588c 2026-10-30T13:17:42.702Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-80554-s390vfioccw-limit-the-number-of-channel-program-segments-in-linux-kernel-716b97757751f1ed 2026-10-30T13:17:39.429Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-80572-input-byd-synchronize-timer-deletion-before-freeing-private-data-in-linux-kernel-2294a12712d39d55 2026-10-30T13:17:35.081Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80587-mptcp-avoid-combining-some-incoming-suboptions-in-linux-kernel-99d9b47348286d0d 2026-10-30T13:17:30.977Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-80602-perfx86amdlbr-fix-kernel-address-leakage-in-linux-kernel-7891e4753fbfce68 2026-10-30T13:18:29.068Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80710-s390dasd-fix-undersized-format-check-buffer-in-linux-kernel-45029cdd722fc9a7 2026-10-30T13:17:26.809Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80728-revert-drmamdgpu-fix-aperture-mapping-leak-in-linux-kernel-91a6a4834eb15343 2026-10-30T13:18:24.792Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80739-netmlx5e-tc-check-if-flow-is-peer-before-acquiring-devcom-lock-in-linux-kernel-d33229eee2f179c5 2026-10-30T13:18:20.467Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80771-hid-nintendo-register-input-device-after-capabilities-are-set-in-linux-kernel-83aefc372a2b82c9 2026-10-30T13:18:16.610Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80836-crypto-virtio-bound-the-akcipher-result-length-in-linux-kernel-9cceed2c5f953020 2026-10-30T13:18:12.944Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80837-netfilter-nftables-dont-queue-packet-path-object-notifications-in-linux-kernel-3fea35ef62e50bd7 2026-10-30T13:18:09.172Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80841-netpacket-defer-vmalloc-txring-free-until-skbs-finish-in-linux-kernel-b08d7fce5f1b0b70 2026-10-30T13:18:05.203Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80851-gtp-serialize-pdp-context-updates-in-linux-kernel-7a6c46b5669c6b16 2026-10-30T13:18:01.412Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80852-tls-device-fix-out-of-bounds-write-in-tlsappendfrag-in-linux-kernel-339dd5bd098ae5c1 2026-10-30T13:17:57.784Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80855-fuse-fix-invalidate-lock-leak-on-open-otrunc-dax-failure-in-linux-kernel-63c990e6da7bcffb 2026-10-30T13:06:19.759Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80856-fuse-fix-invalidate-lock-leak-on-setattr-writeback-failure-in-linux-kernel-aebcdc8860c2e879 2026-10-30T13:06:15.578Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80861-usb-xhci-bail-out-of-setup-if-the-controller-is-inaccessible-in-linux-kernel-289760ec39dcb5ce 2026-10-30T13:06:11.908Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80883-drmtegra-gr2dgr3d-initialize-address-register-map-before-host1x-client-is-registered-in-3dd300b79d04b4c8 2026-10-30T13:06:08.220Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80907-drmamdgpu-fix-uvd-dpb-min-size-calculation-for-h264-in-linux-kernel-29797cfa4f4eaa52 2026-10-30T13:06:04.795Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80925-vlan-fix-skbunderpanic-and-races-when-toggling-hw-vlan-offload-in-linux-kernel-6c03a402fe14ae89 2026-10-30T13:06:01.210Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80967-alsa-pcxhr-initialize-mutexes-before-requesting-threaded-irq-in-linux-kernel-a9b59a60d1564040 2026-10-30T13:05:08.687Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80983-netsmc-fix-socket-refcount-leak-in-smcswitchconns-in-linux-kernel-724931ce79348510 2026-10-30T13:05:54.907Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-80989-net-thunderbolt-mark-the-connection-down-when-bringing-it-up-fails-in-linux-kernel-34a4f1871c5a7e68 2026-10-30T13:05:05.617Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-80990-net-thunderbolt-release-the-rx-hopid-that-was-handed-out-on-mismatch-in-linux-kernel-40d7b6d6e1bfea32 2026-10-30T13:05:49.790Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-89448-iommuvt-d-force-requesting-acs-when-tboot-is-enabled-in-linux-kernel-784c5fa75e632fac 2026-10-30T13:05:01.593Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-89463-power-supply-ucs1002-fix-use-after-free-on-remove-in-linux-kernel-bbabe05baf6ecedd 2026-10-30T13:05:45.735Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-89465-power-supply-rt9455-quiesce-delayed-work-before-teardown-in-linux-kernel-1a225f2b1ed92378 2026-10-30T13:04:56.846Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89475-power-supply-bq24257-fix-use-after-free-on-remove-in-linux-kernel-3fbf4db9e7162a60 2026-10-30T13:05:41.559Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-89480-nvme-tcp-reject-a-read-that-transferred-too-few-bytes-in-linux-kernel-1b92107b0bf8c0c9 2026-10-30T13:04:51.848Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89481-nvme-tcp-fix-host-memory-disclosure-on-r2t-for-a-read-command-in-linux-kernel-30978919c0698693 2026-10-30T13:04:47.309Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89545-sunrpc-defer-rqargp-and-rqresp-free-until-after-rcu-grace-period-in-linux-kernel-a5665b800c8f78a8 2026-10-30T13:04:41.762Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89550-sunrpc-svcauthgss-enforce-krb5-token-minimum-length-in-linux-kernel-6fad4d1466a05a3b 2026-10-30T13:04:13.930Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-89553-nouveaugem-reserve-the-bo-in-the-info-ioctl-around-the-vma-lookup-in-linux-kernel-ce91e414ae4cec06 2026-10-30T13:04:09.696Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89598-fbdev-ssd1307fb-defer-i2c-transfers-from-damage-callbacks-in-linux-kernel-3a194534d4c5308a 2026-10-30T13:04:06.167Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-89640-cifs-fix-lofft-underflow-in-cifsremapfilerange-when-len-0-in-linux-kernel-436b4f14ab74f982 2026-10-30T13:04:02.380Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89650-ceph-bound-numexporttargets-array-for-mds-info-v2v3-in-linux-kernel-fcac52e0cba1b2fe 2026-10-30T13:03:57.158Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-89652-ceph-bound-copied-dentry-name-length-in-nfs-export-getname-in-linux-kernel-a725f0c33ed08ad9 2026-10-30T13:03:52.431Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-89671-nfsd-gate-nfs3-setacl-by-argp-mask-in-linux-kernel-8067aca58c9407d0 2026-10-30T13:03:46.018Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-89672-nfsd-gate-nfs2-setacl-by-argp-mask-in-linux-kernel-002d64f1c3c69662 2026-10-30T13:03:41.581Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-89707-nfsd-release-path-refs-on-followdown-error-in-linux-kernel-0e8d91ab4175fd12 2026-10-30T13:03:37.382Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89744-device-property-fix-infinite-loop-in-fwnodeforeachchildnode-in-linux-kernel-8ad1b5d102b61b8f 2026-10-30T13:03:32.630Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89848-scsi-qla2xxx-quiesce-response-irq-before-freeing-request-queue-in-linux-kernel-22cb49cfdb09dfad 2026-10-30T13:03:27.231Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89860-scsi-qla2xxx-initialize-nvme-abortwork-once-at-submission-in-linux-kernel-c90e64af0777e8ad 2026-10-30T13:02:57.800Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89870-media-zoran-avoid-freeing-a-registered-videodevice-twice-in-linux-kernel-4e3f7b1963fe3a06 2026-10-30T13:02:53.956Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89877-media-saa7164-fix-cleanup-on-resource-allocation-failure-in-linux-kernel-e1b80978f4463ff3 2026-10-30T13:02:49.442Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89926-kvm-s390-fix-length-check-importwpinfo-in-linux-kernel-db0e5c77a8b56e9f 2026-10-30T13:03:23.530Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-89930-kvm-nvmx-service-local-tlb-flushes-on-failed-nested-vm-enter-in-linux-kernel-6ab177c614b18c44 2026-10-30T13:02:45.683Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-89933-iio-pressure-dps310-fix-null-pointer-dereference-on-acpi-probe-in-linux-kernel-72837f76bfa5a4c3 2026-10-30T13:03:20.106Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-89955-s390vfio-ap-fix-null-deref-in-statusshow-during-queue-probe-in-linux-kernel-7746dbc27d324575 2026-10-30T13:03:16.216Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-89958-s390vfio-ap-fix-dereference-matrixmdev-kvm-without-checking-for-null-in-linux-kernel-45672a0fb8254326 2026-10-30T13:03:11.923Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-89960-s390vfio-ap-fix-stale-pqaphook-pointer-on-error-in-vfioapmdevsetkvm-in-linux-kernel-2deb35ef7997ea5e 2026-10-30T13:02:41.562Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89980-alsa-harmony-initialize-locks-before-requesting-irq-in-linux-kernel-f5734ecee99d8f5f 2026-10-30T13:02:36.806Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89988-kprobes-protect-kprobeblacklist-with-rcu-in-linux-kernel-d4564a960f7b6d4f 2026-10-30T13:02:33.000Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-90048-fsntfs3-fix-slab-out-of-bounds-write-in-nicreateattrlist-in-linux-kernel-831f00c9653e349b 2026-10-30T13:02:27.314Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-90066-samplesftrace-fix-kthreadstop-on-errptr-in-ftrace-direct-multi-modify-in-linux-kernel-6d7c8a20036763e3 2026-10-30T13:03:06.166Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-90125-smb-client-fix-request-buffer-leak-in-smb2newreadreq-in-linux-kernel-0392943bab2f4927 2026-10-30T13:03:01.368Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-90139-fuse-check-for-null-root-inode-in-fusefillsupersubmount-in-linux-kernel-fff155320f01894a 2026-10-30T12:51:28.667Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-90153-ksmbd-bound-smbcheckpermdacl-ace-walks-by-dacl-size-in-linux-kernel-a59bf8d9534c09b0 2026-10-30T12:50:29.320Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-90169-ksmbd-free-preauth-sessions-on-connection-teardown-in-linux-kernel-a9d4f8cdc5ec1ff4 2026-10-30T12:51:25.654Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-90170-ksmbd-validate-ipc-response-length-before-dereferencing-its-fields-in-linux-kernel-7a27066bf909574d 2026-10-30T12:51:22.503Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-90200-fsntfs3-fix-integer-overflow-in-mft-cluster-validation-in-linux-kernel-05d32381b88dc68c 2026-10-30T12:51:18.894Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-90229-nvme-apple-destroy-the-admin-queue-on-removal-in-linux-kernel-499f2557a7c96411 2026-10-30T12:50:24.419Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-90235-sunrpc-xprtsock-annotate-shared-socket-callbacks-with-readoncewriteonce-in-linux-kernel-b65cdca0fd04fb0c 2026-10-30T12:50:20.678Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-90313-bpf-cgroup-fix-invalid-storage-access-after-cgroupbpfattach-failed-in-linux-kernel-6c60efc97e02432d 2026-10-30T12:51:14.623Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-90392-bpf-fix-potential-uaf-when-reading-bpf-link-info-in-linux-kernel-3fefd1faf82a4b7e 2026-10-30T12:50:16.980Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-90407-wifi-ath11k-fix-overreads-in-ath11kwmiprocesscsaswitchcountevent-in-linux-kernel-6c433e9edde19440 2026-10-30T12:50:13.793Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-90410-spi-davinci-switch-to-managed-controller-allocation-in-linux-kernel-3191d42654fd7972 2026-10-30T12:51:11.485Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-90418-nilfs2-fix-bug-in-nilfscopydirtypages-on-dirty-state-mismatch-in-linux-kernel-51941e31c1566072 2026-10-30T12:51:07.315Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-92490-firmware-armscmi-unrequest-devices-if-driver-registration-fails-in-linux-kernel-278888840412b2ad 2026-10-30T12:51:03.906Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-92491-firmware-armscmi-roll-back-partial-protocol-table-registration-in-linux-kernel-ab0bdd32d0b982e1 2026-10-30T12:51:00.723Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-93786-ksmbd-preserve-vfs-inherited-posix-acl-mask-in-linux-kernel-458dad6d77ff2f21 2026-10-30T12:50:08.750Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-93790-wifi-iwlwifi-mvm-fix-out-of-bounds-tiddata-access-in-ba-notif-in-linux-kernel-0c0bf504e32881e5 2026-10-30T12:50:05.166Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-93791-wifi-iwlwifi-mvm-add-a-check-on-the-tid-coming-from-the-firmware-in-linux-kernel-9d47de6d9a959dc5 2026-10-30T12:50:55.981Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-93792-wifi-iwlwifi-mvm-fix-a-possible-underflow-in-linux-kernel-7f1cd78f721447cb 2026-10-30T12:50:53.323Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-93794-smbclient-flush-dirty-data-before-punching-a-hole-in-linux-kernel-9a8d05b0fbccad09 2026-10-30T12:50:50.272Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-93823-drmamdkfd-let-driver-decide-buffer-size-at-amdkfdiocgetdmabufinfo-ioctl-in-linux-kernel-c5b6bf1867bc1557 2026-10-30T12:50:46.558Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-93829-smb-client-fix-races-in-cifsd-thread-creation-in-linux-kernel-86b5b5c1cf8c6477 2026-10-30T12:50:42.402Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-97409-nvme-fc-do-not-cancel-requests-in-io-target-before-it-is-initialized-in-linux-kernel-91fbc6c05cb88c53 2026-10-30T12:50:00.996Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-97425-drmamdgpu-fix-buffer-overflow-during-vbios-update-in-linux-kernel-47ad44b5a34bba06 2026-10-30T12:50:38.903Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-97500-wifi-rtw89-phy-check-length-before-parsing-phy-status-ie-in-linux-kernel-bcaca358363975b6 2026-10-30T12:50:35.403Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-97512-spi-spi-qcom-qspi-fix-incomplete-error-handling-in-runtime-pm-in-linux-kernel-2c0a34dec592d5a2 2026-10-30T12:50:32.872Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119036-cwe-770-allocation-of-resources-without-limits-or-throttling-in-business-gocardless-542e7c22146bf4e8 2026-10-30T13:05:37.504Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119037-cwe-347-improper-verification-of-cryptographic-signature-in-business-gocardless-82066e179f61927b 2026-10-30T13:05:33.888Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119038-cwe-639-authorization-bypass-through-user-controlled-key-in-business-gocardless-bf6e542e6fc6be0b 2026-10-30T13:05:29.807Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-115865-cwe-789-memory-allocation-with-excessive-size-value-in-starlet-5c8a1a9119846107 2026-10-30T13:05:25.193Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-115866-cwe-1333-inefficient-regular-expression-complexity-in-starlet-65e659d4cd5b5ebe 2026-10-30T13:05:20.139Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-116127-cwe-444-http-request-smuggling-in-starlet-5172470fc2df64fd 2026-10-30T13:05:16.110Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-116128-cwe-770-allocation-of-resources-without-limits-or-throttling-in-starlet-ac30782aae0bca6d 2026-10-30T13:05:12.369Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-75882-cwe-284-improper-access-control-in-eset-spol-sro-eset-endpoint-encryption-6c462653b3639da1 2026-10-30T13:04:35.053Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118990-cwe-379-creation-of-temporary-file-in-directory-with-insecure-permissions-in-1f67aa1816eadbc4 2026-10-30T13:20:05.180Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118991-cwe-916-use-of-password-hash-with-insufficient-computational-effort-in-callbackery-da105815f5c40ccb 2026-10-30T13:20:01.841Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118992-cwe-78-os-command-injection-in-callbackery-88b6848f99f6d2af 2026-10-30T13:19:58.251Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118993-cwe-1333-inefficient-regular-expression-complexity-in-callbackery-1fde6fa35dd82a60 2026-10-30T13:19:54.760Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118994-cwe-117-improper-output-neutralization-for-logs-in-callbackery-251b95192852c135 2026-10-30T13:19:51.386Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118995-cwe-625-permissive-regular-expression-in-callbackery-0e02f44874c55872 2026-10-30T13:19:47.958Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118996-cwe-212-improper-removal-of-sensitive-information-before-storage-or-transfer-in-f68bb2062ab333c2 2026-10-30T13:19:44.476Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-13576-cwe-916-use-of-password-hash-with-insufficient-computational-effort-in-callbackery-e9cece2f05506228 2026-10-30T13:19:40.511Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118986-cwe-338-use-of-cryptographically-weak-pseudo-random-number-generator-prng-in-9d6515ead63d4f96 2026-10-30T13:13:32.845Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118987-cwe-1463-insufficient-session-timeout-value-in-callbackery-5db1409d997ebff8 2026-10-30T13:13:11.338Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119569-improperly-controlled-modification-of-object-prototype-attributes-prototype-pollution-607c4624c1c6860e 2026-10-30T13:18:09.513Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119570-exposure-of-sensitive-information-to-an-unauthorized-actor-in-parse-community-parse-591f611093df7639 2026-10-30T13:18:10.194Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119571-authorization-bypass-through-user-controlled-key-in-parse-community-parse-server-b8491108d9323ff5 2026-10-30T13:18:10.885Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119572-improper-authentication-in-traefik-87111d2621ac3203 2026-10-30T13:18:11.594Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119573-incorrect-authorization-in-traefik-90a3d07678246487 2026-10-30T13:18:12.280Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119574-unsynchronized-access-to-shared-data-in-a-multithreaded-context-in-traefik-d31def32fcc6b376 2026-10-30T13:18:12.970Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119575-server-side-request-forgery-ssrf-in-arcadedata-arcadedb-89de72d63a62c278 2026-10-30T13:18:13.675Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119576-missing-authorization-in-arcadedata-arcadedb-af6f11b47d1fce3d 2026-10-30T13:18:14.388Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119577-insufficient-session-expiration-in-arcadedata-arcadedb-8ca1a2eb0461c4ca 2026-10-30T13:18:15.066Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119578-use-of-externally-controlled-input-to-select-classes-or-code-unsafe-reflection-in-48044df5ba1eba4d 2026-10-30T13:18:15.757Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119596-authorization-bypass-through-user-controlled-key-in-hdinnovations-unit3d-c1b87ead5c7237b2 2026-10-30T13:18:16.431Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119597-use-of-hard-coded-cryptographic-key-in-aidotnet-opendeepwiki-793e3dd10c0ec462 2026-10-30T13:18:17.101Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-119598-authorization-bypass-through-user-controlled-key-in-iluobei-miaomiaowu-965ae63a9a9c3dee 2026-10-30T13:18:17.785Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119599-incorrect-privilege-assignment-in-looplj-axonhub-269c3f0c87618a3f 2026-10-30T13:18:18.486Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119600-improper-handling-of-length-parameter-inconsistency-in-simsong-tcpflow-1c97fd4e38b93c05 2026-10-30T13:18:19.167Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119601-out-of-bounds-write-in-sshock-afflib-6e4f3e22e0b7b650 2026-10-30T13:18:19.851Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-119602-use-of-uninitialized-resource-in-kyz-libmspack-97ca4e30fb4e70cc 2026-10-30T13:18:20.547Z weekly 0.7 https://radar.offseq.com/threat/important-java-21-openjdk-security-update-for-almalinux-8-and-9-cve-2026-101516-27f5029ada020448 2026-10-30T11:29:45.000Z weekly 0.7 https://radar.offseq.com/threat/kwetsbaarheden-verholpen-in-linux-kernel-6e9154bef21155c5 2026-10-30T12:08:35.850Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-glibc-security-update-394687a99f416d8a 2026-10-30T12:08:40.000Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-glibc-security-bug-fix-and-enhancement-update-cc5873136f8e42fc 2026-10-30T12:08:40.000Z weekly 0.7 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-openstack-services-on-openshift-180-python-botocore-security-update-a76487d982d6efaf 2026-10-30T12:16:17.000Z weekly 0.8 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-openstack-platform-130-python-botocore-security-update-8e23d7ad99884992 2026-10-30T12:16:18.000Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-26589-bpf-reject-variable-offset-alu-on-ptrtoflowkeys-in-linux-kernel-0b7545d937c3eb5f 2026-10-30T12:17:42.202Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-26661-drmamddisplay-add-null-test-for-timing-generator-in-dcn21setpipe-in-linux-kernel-879e0317f86223e9 2026-10-30T12:17:43.342Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26662-drmamddisplay-fix-panelcntl-could-be-null-in-dcn21setbacklightlevel-in-linux-kernel-7f65c90f77c39a5f 2026-10-30T12:17:44.443Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26669-netsched-flower-fix-chain-template-offload-in-linux-kernel-ee4ee673520d3496 2026-10-30T12:17:45.539Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26670-arm64-entry-fix-arm64workaroundspeculativeunprivload-in-linux-kernel-376bad40383ed7da 2026-10-30T12:17:46.615Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26677-rxrpc-fix-delayed-acks-to-not-set-the-reference-serial-number-in-linux-kernel-6a21dadc72ea2136 2026-10-30T12:17:47.694Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26690-net-stmmac-protect-updates-of-64-bit-statistics-counters-in-linux-kernel-d4eeacabaf35a51b 2026-10-30T12:17:48.897Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-26740-netsched-actmirred-use-the-backlog-for-mirred-ingress-in-linux-kernel-4e0610c981ec166a 2026-10-30T12:17:50.529Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26799-asoc-qcom-fix-uninitialized-pointer-dmactl-in-linux-kernel-716fed4e4fbdab03 2026-10-30T12:17:51.599Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-26828-cifs-fix-underflow-in-parseserverinterfaces-in-linux-kernel-22d76e51f5d40a15 2026-10-30T12:17:52.665Z weekly 0.9 https://radar.offseq.com/threat/cve-2024-26841-loongarch-update-cpusiblingmap-when-disabling-nonboot-cpus-in-linux-kernel-60ae1ef027bf9a80 2026-10-30T12:17:53.711Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26866-spi-lpspi-avoid-potential-use-after-free-in-probe-in-linux-kernel-4a6637e95b5d333c 2026-10-30T12:17:54.784Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26869-f2fs-fix-to-truncate-meta-inode-pages-forcely-in-linux-kernel-8cd59f6b0390d6dd 2026-10-30T12:17:55.855Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-26873-scsi-hisisas-fix-a-deadlock-issue-related-to-automatic-dump-in-linux-kernel-1739d690c91282aa 2026-10-30T12:17:56.908Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26876-drmbridge-adv7511-fix-crash-on-irq-during-probe-in-linux-kernel-0856eb30f4fad54f 2026-10-30T12:17:57.964Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26886-bluetooth-afbluetooth-fix-deadlock-in-linux-kernel-a8496b88726478d0 2026-10-30T12:17:59.005Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26889-bluetooth-hcicore-fix-possible-buffer-overflow-in-linux-kernel-ba68ef366322f1ae 2026-10-30T12:18:00.061Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26902-perf-riscv-fix-panic-on-pmu-overflow-handler-in-linux-kernel-cd682b8a10561401 2026-10-30T12:18:01.097Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26947-arm-93591-flush-check-if-the-folio-is-reserved-for-no-mapping-addresses-in-linux-kernel-f249e8cf525a1021 2026-10-30T12:18:02.172Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26948-drmamddisplay-add-a-dcstate-null-check-in-dcstaterelease-in-linux-kernel-40b29c6c4a08709b 2026-10-30T12:18:03.233Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-26953-net-esp-fix-bad-handling-of-pages-from-pagepool-in-linux-kernel-9cd0224342bb9e5e 2026-10-30T12:18:04.284Z weekly 0.9 https://radar.offseq.com/threat/cve-2024-27005-interconnect-dont-access-reqlist-while-its-being-manipulated-in-linux-kernel-7655d881ad294e46 2026-10-30T12:18:05.338Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-27010-netsched-fix-mirred-deadlock-on-device-recursion-in-linux-kernel-43188023432597cd 2026-10-30T12:18:06.388Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-27011-netfilter-nftables-fix-memleak-in-map-from-abort-path-in-linux-kernel-5393965fb25eec4f 2026-10-30T12:18:07.437Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-27022-fork-defer-linking-file-vma-until-vma-is-fully-initialized-in-linux-kernel-08a720696ac4cd4e 2026-10-30T12:18:08.505Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-27041-drmamddisplay-fix-null-checks-for-adev-dmdc-in-amdgpudmfini-in-linux-kernel-f45290965bd69625 2026-10-30T12:18:09.560Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-27057-asoc-sof-ipc4-pcm-workaround-for-crashed-firmware-on-system-suspend-in-linux-kernel-92ea80c17ed86ef7 2026-10-30T12:18:10.616Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-27062-nouveau-lock-the-client-object-tree-in-linux-kernel-4529841beb4f0c95 2026-10-30T12:18:11.669Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-27080-btrfs-fix-race-when-detecting-delalloc-ranges-during-fiemap-in-linux-kernel-43686e3228ef9516 2026-10-30T12:18:12.723Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-27408-dmaengine-dw-edma-edma-add-sync-read-before-starting-the-dma-transfer-in-remote-setup-89647bd9a448557c 2026-10-30T12:18:13.788Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-35784-btrfs-fix-deadlock-with-fiemap-and-extent-locking-in-linux-kernel-75296579e34d6d04 2026-10-30T12:18:14.856Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-35799-drmamddisplay-prevent-crash-when-disable-stream-in-linux-kernel-6431ceb24c9eca69 2026-10-30T12:18:15.895Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-35860-bpf-support-deferring-bpflink-dealloc-to-after-rcu-grace-period-in-linux-kernel-599e4c8f8d0bdea9 2026-10-30T12:18:16.969Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-35904-selinux-avoid-dereference-of-garbage-after-mount-failure-in-linux-kernel-f4934dd145d351bf 2026-10-30T12:18:19.710Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-35924-usb-typec-ucsi-limit-read-size-on-v12-in-linux-kernel-3b484dbbf5eab258 2026-10-30T12:18:20.791Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-35942-pmdomain-imx8mp-blk-ctrl-imx8mpblk-add-fdcc-clock-to-hdmimix-domain-in-linux-kernel-885ab570d341a4e7 2026-10-30T12:18:21.850Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-35945-net-phy-phydevice-prevent-nullptr-exceptions-on-isr-in-linux-kernel-ed86e04f25be14b0 2026-10-30T12:18:22.917Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-35946-wifi-rtw89-fix-null-pointer-access-when-abort-scan-in-linux-kernel-a5ccc1faf2a983e3 2026-10-30T12:18:23.972Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-35951-drmpanfrost-fix-the-error-path-in-panfrostmmumapfaultaddr-in-linux-kernel-5a8737de36d2ccdc 2026-10-30T12:18:25.033Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-36881-mmuserfaultfd-reset-ptes-when-close-for-wr-protected-ones-in-linux-kernel-e48694116651a335 2026-10-30T12:18:26.092Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-36911-hvnetvsc-dont-free-decrypted-memory-in-linux-kernel-e0b67eeff7a13b25 2026-10-30T12:18:27.153Z weekly 0.9 https://radar.offseq.com/threat/cve-2024-36968-bluetooth-l2cap-fix-div-by-zero-in-l2capleflowctlinit-in-linux-kernel-565c0e6b8485ffde 2026-10-30T12:18:28.225Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-38557-netmlx5-reload-only-ib-representors-upon-lag-disableenable-in-linux-kernel-ffdaebb9583f3d26 2026-10-30T12:18:29.286Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-38570-gfs2-fix-potential-glock-use-after-free-on-unmount-in-linux-kernel-2d765ae46b1e4549 2026-10-30T12:18:30.366Z weekly 0.9 https://radar.offseq.com/threat/cve-2024-38594-net-stmmac-move-the-est-lock-to-struct-stmmacpriv-in-linux-kernel-6ac8451e69a68b40 2026-10-30T12:18:31.444Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-38608-netmlx5e-fix-netif-state-handling-in-linux-kernel-d1eb5b5a73ebeaba 2026-10-30T12:18:32.498Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-38622-drmmsmdpu-add-callback-function-pointer-check-before-its-call-in-linux-kernel-b7143fe3f65ccab1 2026-10-30T12:18:33.559Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-38625-fsntfs3-check-folio-pointer-for-null-in-linux-kernel-6fc34851b7c532c5 2026-10-30T12:18:34.622Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-38630-watchdog-cpu5wdtc-fix-use-after-free-bug-caused-by-cpu5wdttrigger-in-linux-kernel-abf850683b32a27f 2026-10-30T12:18:35.686Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-40909-bpf-fix-a-potential-use-after-free-in-bpflinkfree-in-linux-kernel-39c4b93050615a20 2026-10-30T12:18:36.759Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-40975-platformx86-x86-android-tablets-unregister-devices-in-reverse-order-in-linux-kernel-9a8c0ce432f421c1 2026-10-30T12:18:37.821Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-40998-ext4-fix-uninitialized-ratelimitstate-lock-access-in-ext4fillsuper-in-linux-kernel-412b712583ce4f27 2026-10-30T12:18:38.884Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-40999-net-ena-add-validation-for-completion-descriptors-consistency-in-linux-kernel-886f0d4d0784ee97 2026-10-30T12:18:39.938Z weekly 0.9 https://radar.offseq.com/threat/cve-2024-41008-drmamdgpu-change-vm-taskinfo-handling-in-linux-kernel-1b100913d9d41017 2026-10-30T12:18:40.998Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-41023-scheddeadline-fix-taskstruct-reference-leak-in-linux-kernel-02237f17aff17e36 2026-10-30T12:18:42.240Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-41031-mmfilemap-skip-to-create-pmd-sized-page-cache-if-needed-in-linux-kernel-c960068ffc54c085 2026-10-30T12:18:43.308Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-41045-bpf-defer-work-in-bpftimercancelandfree-in-linux-kernel-d8eee6e08af5b18f 2026-10-30T12:18:44.387Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-41048-skmsg-skip-zero-length-skb-in-skmsgrecvmsg-in-linux-kernel-e9417d81606cf865 2026-10-30T12:18:45.453Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-41082-nvme-fabrics-use-reserved-tag-for-reg-readwrite-command-in-linux-kernel-f2e46fb5bdd6c3b0 2026-10-30T12:18:48.552Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-41935-f2fs-fix-to-shrink-read-extent-node-in-batches-in-linux-kernel-b29936474b862156 2026-10-30T12:18:49.612Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-42107-ice-dont-process-extts-if-ptp-is-disabled-in-linux-kernel-6fd0ffa049142f60 2026-10-30T12:18:50.668Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-42123-drmamdgpu-fix-double-free-erraddr-pointer-warnings-in-linux-kernel-e71e10ee8aa0a424 2026-10-30T12:18:51.727Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-42128-leds-an30259a-use-devmmutexinit-for-mutex-initialization-in-linux-kernel-60c31ca80b581d0e 2026-10-30T12:18:52.791Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-42139-ice-fix-improper-extts-handling-in-linux-kernel-594fe3bde1722f4a 2026-10-30T12:18:53.851Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-42155-s390pkey-wipe-copies-of-protected-and-secure-keys-in-linux-kernel-3bb90a54b112d00c 2026-10-30T12:18:54.915Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-42156-s390pkey-wipe-copies-of-clear-key-structures-on-failure-in-linux-kernel-914a5938f34bf63d 2026-10-30T12:18:55.967Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-42158-s390pkey-use-kfreesensitive-to-fix-coccinelle-warnings-in-linux-kernel-d0abb8ffb3d2d4bf 2026-10-30T12:18:57.021Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-42239-bpf-fail-bpftimercancel-when-callback-is-being-cancelled-in-linux-kernel-5cecadf68c3616f8 2026-10-30T12:18:58.089Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-42241-mmshmem-disable-pmd-sized-page-cache-if-needed-in-linux-kernel-7de5d8a8880b9170 2026-10-30T12:18:59.158Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-42243-mmfilemap-make-maxpagecacheorder-acceptable-to-xarray-in-linux-kernel-c11e9ac959d4cd70 2026-10-30T12:19:00.220Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-42279-spi-microchip-core-ensure-tx-and-rx-fifos-are-empty-at-start-of-a-transfer-in-linux-09dd4d556c90aca8 2026-10-30T12:19:01.283Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-43819-kvm-s390-reject-memory-region-operations-for-ucontrol-vms-in-linux-kernel-935279709495fdee 2026-10-30T12:19:02.338Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-43824-pci-endpoint-pci-epf-test-make-use-of-cached-epcfeatures-in-in-linux-kernel-fb6abd17a838da70 2026-10-30T12:19:03.404Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-43850-soc-qcom-icc-bwmon-fix-refcount-imbalance-seen-during-bwmonremove-in-linux-kernel-4da460fe6d0961f7 2026-10-30T12:19:04.457Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-43872-rdmahns-fix-soft-lockup-under-heavy-ceqe-load-in-linux-kernel-6558e7205eb7e57d 2026-10-30T12:19:05.518Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-43899-drmamddisplay-fix-null-pointer-deref-in-dcn20resourcec-in-linux-kernel-21af3177f7c1b6ce 2026-10-30T12:19:06.589Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-43913-nvme-apple-fix-device-reference-counting-in-linux-kernel-ce1a130fafbe695d 2026-10-30T12:19:07.649Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-44941-f2fs-fix-to-cover-read-extent-cache-access-with-lock-in-linux-kernel-0efd27ac8a3e8463 2026-10-30T12:19:08.713Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-44942-f2fs-fix-to-do-sanity-check-on-f2fsinlinedata-flag-in-inode-during-gc-in-linux-kernel-c7a572cc38d6de06 2026-10-30T12:19:09.788Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-44951-serial-sc16is7xx-fix-tx-fifo-corruption-in-linux-kernel-3f1470e677bbcfa6 2026-10-30T12:19:10.867Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-44963-btrfs-do-not-bugon-when-freeing-tree-block-after-error-in-linux-kernel-7e4232cd2d765d29 2026-10-30T12:19:11.923Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-46681-pktgen-use-cpusreadlock-in-pgnetinit-in-linux-kernel-769525a9842d5b5b 2026-10-30T12:19:12.977Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-46728-drmamddisplay-check-index-for-auxrdinterval-before-using-in-linux-kernel-0b1ecce0a9e26195 2026-10-30T12:19:14.178Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-46730-drmamddisplay-ensure-array-index-tginst-wont-be-1-in-linux-kernel-aca0736f64585508 2026-10-30T12:19:15.979Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-46765-ice-protect-xdp-configuration-with-a-mutex-in-linux-kernel-990582c4b0f5220d 2026-10-30T12:19:17.066Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-46775-drmamddisplay-validate-function-returns-in-linux-kernel-a1203996ad69dcf4 2026-10-30T12:19:18.118Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-46787-userfaultfd-fix-checks-for-huge-pmds-in-linux-kernel-eecf59c7f12a2948 2026-10-30T12:19:19.182Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-46808-drmamddisplay-add-missing-null-pointer-check-within-dpcdextendaddressrange-in-linux-66971202400fc5de 2026-10-30T12:19:20.231Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-46811-drmamddisplay-fix-index-may-exceed-array-range-within-fpuupdatebwboundingbox-in-linux-db0e1831fd01fd56 2026-10-30T12:19:21.278Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-46813-drmamddisplay-check-linkindex-before-accessing-dc-links-in-linux-kernel-67d23604e89c15e3 2026-10-30T12:19:22.335Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-46834-ethtool-fail-closed-if-we-cant-get-max-channel-used-in-indirection-tables-in-linux-1734a24bb7147dd8 2026-10-30T12:19:23.393Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-46860-wifi-mt76-mt7921-fix-null-pointer-access-in-mt7921ipv6addrchange-in-linux-kernel-0406b3f99ed07c9e 2026-10-30T12:19:24.447Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-47141-pinmux-use-sequential-access-to-access-desc-pinmux-data-in-linux-kernel-25b35cfd8c738052 2026-10-30T12:19:25.504Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-47658-crypto-stm32cryp-call-finalize-with-bh-disabled-in-linux-kernel-2d5af231859ee8d6 2026-10-30T12:19:26.566Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-47661-drmamddisplay-avoid-overflow-from-uint32t-to-uint8t-in-linux-kernel-823199bd39105786 2026-10-30T12:19:27.629Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-47664-spi-hisi-kunpeng-add-verification-for-the-maxfrequency-provided-by-the-firmware-in-1a2e6178338cda52 2026-10-30T12:19:28.681Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-47752-media-mediatek-vcodec-fix-h264-stateless-decoder-smatch-warning-in-linux-kernel-26052751e783fb75 2026-10-30T12:19:29.734Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-47794-bpf-prevent-tailcall-infinite-loop-caused-by-freplace-in-linux-kernel-b977caba9e9726e2 2026-10-30T12:19:30.794Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-49569-nvme-rdma-unquiesce-adminq-before-destroy-it-in-linux-kernel-1e7dbc7868c1a6a7 2026-10-30T12:19:31.857Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-49901-drmmsmadreno-assign-msmgpu-pdev-earlier-to-avoid-nullptrs-in-linux-kernel-79cfd7228f6cb01e 2026-10-30T12:19:32.933Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49906-drmamddisplay-check-null-pointer-before-try-to-access-it-in-linux-kernel-5e80d4b508f90c23 2026-10-30T12:19:33.987Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49914-drmamddisplay-add-null-check-for-pipectx-planestate-in-dcn20programpipe-in-linux-kernel-b1deaa85b3360d62 2026-10-30T12:19:35.058Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49918-drmamddisplay-add-null-check-for-headpipe-in-in-linux-kernel-a25b4e81f379fda0 2026-10-30T12:19:36.123Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49919-drmamddisplay-add-null-check-for-headpipe-in-dcn201acquirefreepipeforlayer-in-linux-309a400f1e73ad0d 2026-10-30T12:19:37.211Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49920-drmamddisplay-check-null-pointers-before-multiple-uses-in-linux-kernel-f37d2e1b78fcf0de 2026-10-30T12:19:38.272Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49921-drmamddisplay-check-null-pointers-before-used-in-linux-kernel-3938cf1af4c87d35 2026-10-30T12:19:39.338Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49922-drmamddisplay-check-null-pointers-before-using-them-in-linux-kernel-16a08fb4df8d3ca0 2026-10-30T12:19:41.618Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49923-drmamddisplay-pass-non-null-to-dcn20validateapplypipesplitflags-in-linux-kernel-ba7417b68b29b3c8 2026-10-30T12:19:42.678Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49926-rcu-tasks-fix-access-non-existent-percpu-rtpcp-variable-in-rcutasksneedgpcb-in-linux-1a33d2653107ebad 2026-10-30T12:19:43.730Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49940-l2tp-prevent-possible-tunnel-refcount-underflow-in-linux-kernel-eb5d180c94918c90 2026-10-30T12:19:44.806Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-49945-netncsi-disable-the-ncsi-work-before-freeing-the-associated-structure-in-linux-kernel-f1a69f037ef5bea1 2026-10-30T12:19:45.935Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-49970-drmamddisplay-implement-bounds-check-for-stream-encoder-creation-in-dcn401-in-linux-6b72452dff5b7445 2026-10-30T12:19:47.080Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-50009-cpufreq-amd-pstate-add-check-for-cpufreqcpugets-return-value-in-linux-kernel-2edefc9d0d75848f 2026-10-30T12:19:48.234Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-50135-nvme-pci-fix-race-condition-between-reset-and-nvmedevdisable-in-linux-kernel-79e533081a691ef4 2026-10-30T12:19:49.347Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-50226-cxlport-fix-use-after-free-permit-out-of-order-decoder-shutdown-in-linux-kernel-f928d1ae52f37186 2026-10-30T12:19:50.433Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-50285-ksmbd-check-outstanding-simultaneous-smb-operations-in-linux-kernel-0b57c91070ddbf1f 2026-10-30T12:19:51.479Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-50289-media-av7110-fix-a-spectre-vulnerability-in-linux-kernel-ae2f252557346a53 2026-10-30T12:19:52.545Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-52559-drmmsmgem-prevent-integer-overflow-in-msmioctlgemsubmit-in-linux-kernel-46722852d7b5c24e 2026-10-30T12:19:53.618Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-52560-fsntfs3-mark-inode-as-bad-as-soon-as-error-detected-in-mienumattr-in-linux-kernel-4cfb27fda613951a 2026-10-30T12:19:54.671Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-53051-drmi915hdcp-add-encoder-check-in-intelhdcpgetcapability-in-linux-kernel-a3f20e126b63b41e 2026-10-30T12:19:55.725Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-53056-drmmediatek-fix-potential-null-dereference-in-mtkcrtcdestroy-in-linux-kernel-904daa7b1b48fb22 2026-10-30T12:19:56.850Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-53068-firmware-armscmi-fix-slab-use-after-free-in-scmibusnotifier-in-linux-kernel-45cb4b417ae77fdb 2026-10-30T12:19:57.924Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-53090-afs-fix-lock-recursion-in-linux-kernel-1e1cc5bfd3ff0ff5 2026-10-30T12:19:58.981Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-53091-bpf-add-skisinet-and-isicsk-check-in-tlsswhasctxtxrx-in-linux-kernel-b09567df56b25c18 2026-10-30T12:20:00.071Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-53094-rdmasiw-add-sendpageok-check-to-disable-msgsplicepages-in-linux-kernel-7454556717d1f2bb 2026-10-30T12:20:01.111Z weekly 0.9 https://radar.offseq.com/threat/cve-2024-53095-smb-client-fix-use-after-free-of-network-namespace-in-linux-kernel-40e08a2be08b7959 2026-10-30T12:20:02.185Z weekly 0.9 https://radar.offseq.com/threat/cve-2024-53114-x86cpuamd-clear-virtualized-vmloadvmsave-on-zen4-client-in-linux-kernel-7f7ae30c261771b5 2026-10-30T12:20:03.250Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-53134-pmdomain-imx93-blk-ctrl-correct-remove-path-in-linux-kernel-bfd001808d992b4f 2026-10-30T12:20:04.330Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-53147-exfat-fix-out-of-bounds-access-of-directory-entries-in-linux-kernel-d44c453de9f0449f 2026-10-30T12:20:05.405Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-53168-sunrpc-fix-one-uaf-issue-caused-by-sunrpc-kernel-tcp-socket-in-linux-kernel-2f7327376c3303e8 2026-10-30T12:20:06.499Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-53177-smb-prevent-use-after-free-due-to-opencacheddir-error-paths-in-linux-kernel-692d2130550d923d 2026-10-30T12:20:07.565Z weekly 0.9 https://radar.offseq.com/threat/cve-2024-53178-smb-dont-leak-cfid-when-reconnect-races-with-opencacheddir-in-linux-kernel-ccb7f92445b9143e 2026-10-30T12:20:08.639Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-53179-smb-client-fix-use-after-free-of-signing-key-in-linux-kernel-d8da92375cc6c1da 2026-10-30T12:20:09.698Z weekly 0.9 https://radar.offseq.com/threat/cve-2024-53187-iouring-check-for-overflows-in-iopinpages-in-linux-kernel-6a981d885ea79a03 2026-10-30T12:20:10.758Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-53195-kvm-arm64-get-rid-of-userspaceirqchipinuse-in-linux-kernel-ca9ec773efe2d1ed 2026-10-30T12:20:11.823Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-53201-drmamddisplay-fix-null-check-for-pipectx-planestate-in-dcn20programpipe-in-linux-kernel-4296c717df475cbf 2026-10-30T12:20:12.879Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-53216-nfsd-release-svcexpkeysvcexport-with-rcuwork-in-linux-kernel-24281424978f665f 2026-10-30T12:20:13.931Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-53224-rdmamlx5-move-events-notifier-registration-to-be-after-device-registration-in-linux-3d6ea1da5fe856ba 2026-10-30T12:20:14.984Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-54683-netfilter-idletimer-fix-for-possible-abba-deadlock-in-linux-kernel-e4daee8a09558cb8 2026-10-30T12:20:16.039Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-56538-drm-zynqmpkms-unplug-drm-device-before-removal-in-linux-kernel-c4cd53e77d505e49 2026-10-30T12:20:17.114Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-56565-f2fs-fix-to-drop-all-discards-after-creating-snapshot-on-lvm-device-in-linux-kernel-ee05ddb5501b83c8 2026-10-30T12:20:18.174Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-56566-mmslub-avoid-list-corruption-when-removing-a-slab-from-the-full-list-in-linux-kernel-65d37986c84a461b 2026-10-30T12:20:19.230Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-56583-scheddeadline-fix-warning-in-migrateenable-for-boosted-tasks-in-linux-kernel-be7c85ace8f3efda 2026-10-30T12:20:20.293Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-56588-scsi-hisisas-create-all-dump-files-during-debugfs-initialization-in-linux-kernel-a0709abb93f98961 2026-10-30T12:20:21.374Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-56592-bpf-call-freehtabelem-after-htabunlockbucket-in-linux-kernel-fd27e8b048a0b9a1 2026-10-30T12:20:22.462Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-56611-mmmempolicy-fix-migratetonode-assuming-there-is-at-least-one-vma-in-a-mm-in-linux-kernel-ad1c1f7bdd593f00 2026-10-30T12:20:23.545Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-56641-netsmc-initialize-closework-early-to-avoid-warning-in-linux-kernel-37342e0b0a5537e2 2026-10-30T12:20:24.613Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-56692-f2fs-fix-to-do-sanity-check-on-node-blkaddr-in-truncatenode-in-linux-kernel-c1fdab44e0ea2798 2026-10-30T12:20:25.681Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-56712-udmabuf-fix-memory-leak-on-last-exportudmabuf-error-path-in-linux-kernel-1f53e37a80dc88d1 2026-10-30T12:20:26.741Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-56729-smb-initialize-cfid-tcon-before-performing-network-ops-in-linux-kernel-77ae587d57a1c2cb 2026-10-30T12:20:27.814Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-56742-vfiomlx5-fix-an-unwind-issue-in-mlx5vfaddmigrationpages-in-linux-kernel-513f76b7db40fe38 2026-10-30T12:20:28.869Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-57804-scsi-mpi3mr-fix-corrupt-config-pages-phy-state-is-switched-in-sysfs-in-linux-kernel-e0205c9a1d0a86cf 2026-10-30T12:20:29.936Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-57888-workqueue-do-not-warn-when-cancelling-wqmemreclaim-work-from-wqmemreclaim-worker-in-12937c7fe7bcf0a0 2026-10-30T12:20:31.006Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-57974-udp-deal-with-race-between-udp-socket-address-change-and-rehash-in-linux-kernel-7f53bd45f3815d31 2026-10-30T12:20:32.080Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-57976-btrfs-do-proper-folio-cleanup-when-cowfilerange-failed-in-linux-kernel-7b3af55c1c9ef657 2026-10-30T12:20:33.140Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-57982-xfrm-state-fix-out-of-bounds-read-during-lookup-in-linux-kernel-d62a9285738364c9 2026-10-30T12:20:34.191Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-57999-powerpcpseriesiommu-iommu-incorrectly-marks-mmio-range-in-ddw-in-linux-kernel-4e3a3e45273b5149 2026-10-30T12:20:35.254Z weekly 0.8 https://radar.offseq.com/threat/cve-2024-58006-pci-dwc-ep-prevent-changing-bar-sizeflags-in-pciepcsetbar-in-linux-kernel-64eb27cce9354ed2 2026-10-30T12:20:36.342Z weekly 0.9 https://radar.offseq.com/threat/cve-2024-58012-asoc-sof-intel-hda-dai-ensure-dai-widget-is-valid-during-params-in-linux-kernel-72a2de067413a46c 2026-10-30T12:20:37.411Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-58096-wifi-ath11k-add-srng-lock-for-ath11khalsrng-in-monitor-mode-in-linux-kernel-809d0b43559ddffc 2026-10-30T12:20:38.488Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-21635-rds-sysctl-rdstcprcvsndbuf-avoid-using-current-nsproxy-in-linux-kernel-ea675c99679755bd 2026-10-30T12:20:39.557Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21656-hwmon-drivetemp-fix-driver-producing-garbage-data-when-scsi-errors-occur-in-linux-kernel-f6ded60ac2ceac70 2026-10-30T12:20:40.612Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21658-btrfs-avoid-null-pointer-dereference-if-no-valid-extent-tree-in-linux-kernel-5412031021fd9336 2026-10-30T12:20:41.665Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21673-smb-client-fix-double-free-of-tcpserverinfohostname-in-linux-kernel-50a168606abb5f8d 2026-10-30T12:20:42.724Z weekly 0.9 https://radar.offseq.com/threat/cve-2025-21696-mm-clear-uffd-wp-ptepmd-state-on-mremap-in-linux-kernel-c8b967a22ca81f79 2026-10-30T12:20:43.783Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21714-rdmamlx5-fix-implicit-odp-use-after-free-in-linux-kernel-dfb18b3684d3565f 2026-10-30T12:20:44.954Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-21723-scsi-mpi3mr-fix-possible-crash-when-setting-up-bsg-fails-in-linux-kernel-7b040ccd40d719bc 2026-10-30T12:20:46.798Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21729-wifi-rtw89-fix-race-between-cancelhwscan-and-hwscan-completion-in-linux-kernel-fe2e3956a3dbdb57 2026-10-30T12:20:47.867Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-21732-rdmamlx5-fix-a-race-for-an-odp-mr-which-leads-to-cqe-with-error-in-linux-kernel-8eb887cfcab91d3f 2026-10-30T12:20:48.948Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21768-net-ipv6-fix-dst-ref-loops-in-rpl-seg6-and-ioam6-lwtunnels-in-linux-kernel-0d70f2a8da0ac2c4 2026-10-30T12:20:50.013Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21801-net-ravb-fix-missing-rtnl-lock-in-suspendresume-path-in-linux-kernel-4382b7599ff0c008 2026-10-30T12:20:51.096Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-21831-pci-avoid-putting-some-root-ports-into-d3-on-tuxedo-sirius-gen1-in-linux-kernel-a2e619490a2dad8c 2026-10-30T12:20:52.158Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21870-asoc-sof-ipc4-topology-harden-loops-for-looking-up-alh-copiers-in-linux-kernel-c11e5f0d6333b7dc 2026-10-30T12:20:53.223Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-21872-efi-dont-map-the-entire-mokvar-table-to-determine-its-size-in-linux-kernel-b1e56721071d0ddb 2026-10-30T12:20:54.280Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21885-rdmabnxtre-fix-the-page-details-for-the-srq-created-by-kernel-consumers-in-linux-kernel-2a1f78b09878f924 2026-10-30T12:20:55.350Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-21886-rdmamlx5-fix-implicit-odp-hang-on-parent-deregistration-in-linux-kernel-a50083e729159888 2026-10-30T12:20:56.440Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21888-rdmamlx5-fix-a-warn-during-deregmr-for-dm-type-in-linux-kernel-9c9eaf04c3aa1e5d 2026-10-30T12:20:57.521Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21892-rdmamlx5-fix-the-recovery-flow-of-the-umr-qp-in-linux-kernel-11f06c66de74f420 2026-10-30T12:20:58.600Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21894-net-enetc-vfs-do-not-support-hwtstamptxonestepsync-in-linux-kernel-465b7a4a88df4da2 2026-10-30T12:20:59.672Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21927-nvme-tcp-fix-potential-memory-corruption-in-nvmetcprecvpdu-in-linux-kernel-28a210955abda225 2026-10-30T12:21:00.738Z weekly 0.9 https://radar.offseq.com/threat/cve-2025-21942-btrfs-zoned-fix-extent-range-end-unlock-in-cowfilerange-in-linux-kernel-0be8d1288aa4bf5d 2026-10-30T12:21:01.806Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-21955-ksmbd-prevent-connection-release-during-oplock-break-notification-in-linux-kernel-26a6a038321b7e28 2026-10-30T12:21:02.884Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-21961-eth-bnxt-fix-truesize-for-mb-xdp-pass-case-in-linux-kernel-faead7ab462395ab 2026-10-30T12:21:03.937Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-21967-ksmbd-fix-use-after-free-in-ksmbdfreeworkstruct-in-linux-kernel-e0a0e43f57056d6f 2026-10-30T12:21:05.006Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-21969-bluetooth-l2cap-fix-slab-use-after-free-read-in-l2capsendcmd-in-linux-kernel-8d14a7fe4b396329 2026-10-30T14:06:47.395Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-21972-net-mctp-unshare-packets-when-reassembling-in-linux-kernel-117093b0a4e38330 2026-10-30T14:06:43.134Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-22037-ksmbd-fix-null-pointer-dereference-in-allocpreauthhash-in-linux-kernel-66f61584bdb988b2 2026-10-30T14:06:37.106Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-22048-loongarch-bpf-dont-override-subprogs-return-value-in-linux-kernel-5c3cd500a891eb8e 2026-10-30T14:06:33.698Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-22053-net-ibmveth-make-vethpoolstore-stop-hanging-in-linux-kernel-18e9d3112e00d5f5 2026-10-30T14:06:29.747Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-22057-net-decrease-cached-dst-counters-in-dstrelease-in-linux-kernel-c9052c5ad19f6386 2026-10-30T14:06:25.900Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-22070-fs9p-fix-null-pointer-dereference-on-mkdir-in-linux-kernel-ca57f6e5fd2ec7e1 2026-10-30T14:06:21.538Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-22074-ksmbd-fix-rcount-decincrement-mismatch-in-linux-kernel-a210b065b3002479 2026-10-30T14:06:18.220Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-22109-ax25-remove-broken-autobind-in-linux-kernel-8a50cefe0872bced 2026-10-30T14:06:13.997Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-22115-btrfs-fix-block-group-refcount-race-in-btrfscreatependingblockgroups-in-linux-kernel-37ca241d5106fa22 2026-10-30T14:06:09.618Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-22127-f2fs-fix-potential-deadloop-in-preparecompressoverwrite-in-linux-kernel-25fc97bbfd9d3595 2026-10-30T14:06:04.029Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-37747-perf-fix-hang-while-freeing-sigtrap-event-in-linux-kernel-ea179748de155701 2026-10-30T14:06:00.459Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-37750-smb-client-fix-uaf-in-decryption-with-multichannel-in-linux-kernel-12b44fd0ffa713c4 2026-10-30T14:05:39.355Z weekly 0.9 https://radar.offseq.com/threat/cve-2025-37806-fsntfs3-keep-write-operations-atomic-in-linux-kernel-0a334fa62959ee4b 2026-10-30T14:05:56.569Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-37807-bpf-fix-kmemleak-warning-for-percpu-hashmap-in-linux-kernel-8c06fd903323d656 2026-10-30T14:05:53.697Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-37842-spi-fsl-qspi-use-devm-function-instead-of-driver-remove-in-linux-kernel-24ca73ae0cd78a6d 2026-10-30T14:05:50.710Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-37853-drmamdkfd-debugfs-hanghws-skip-gpu-with-mes-in-linux-kernel-eaf8d9a2c31e9696 2026-10-30T14:05:47.087Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-37856-btrfs-harden-blockgroupbglist-against-listdel-races-in-linux-kernel-177e0ce6761f818d 2026-10-30T14:05:35.205Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-37860-sfc-fix-null-dereferences-in-ef100processdesignparam-in-linux-kernel-aa2da6a12cfea92b 2026-10-30T14:05:42.660Z weekly 0.7 https://radar.offseq.com/threat/cve-2025-37861-scsi-mpi3mr-synchronous-access-bw-reset-and-tm-thread-for-reply-queue-in-linux-kernel-aea0cedd2dd89839 2026-10-30T14:05:30.160Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-37952-ksmbd-fix-uaf-in-closefiletableids-in-linux-kernel-8cfdd54b75ff3bfb 2026-10-30T14:05:26.283Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-37956-ksmbd-prevent-rename-with-empty-string-in-linux-kernel-f3c530060f234393 2026-10-30T14:05:22.373Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-37957-kvm-svm-forcibly-leave-smm-mode-on-shutdown-interception-in-linux-kernel-929dedc8fadd4c71 2026-10-30T14:03:49.445Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-37977-scsi-ufs-exynos-disable-iocc-if-dma-coherent-property-isnt-set-in-linux-kernel-1c2841c35afb0021 2026-10-30T14:03:45.350Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-39989-x86mce-use-iscopyfromuser-to-determine-copy-from-user-context-in-linux-kernel-e458e0ab8c2bd0d2 2026-10-30T14:03:41.870Z weekly 0.8 https://radar.offseq.com/threat/cve-2025-40325-mdraid10-wait-barrier-before-returning-discard-request-with-reqnowait-in-linux-kernel-7e130c0236ba03f8 2026-10-30T14:03:37.932Z weekly 0.7 https://radar.offseq.com/threat/cpaneljsonxs-versions-from-420-before-480-for-perl-write-out-of-bounds-when-a-tied-or-shared-cve-2026-34004a60b291b11a 2026-10-30T14:03:34.750Z weekly 0.8 https://radar.offseq.com/threat/cpaneljsonxs-versions-before-480-for-perl-use-the-parent-interpreters-scalars-from-a-parser-cve-2026-41ea15d0fe5b4c25 2026-10-30T14:03:31.285Z weekly 0.8 https://radar.offseq.com/threat/http-basic-auth-enforces-no-retry-limit-or-backoff-cve-2026-22114-43a9e9a6ccf8eb97 2026-10-30T14:03:28.220Z weekly 0.7 https://radar.offseq.com/threat/the-web-server-does-not-check-authentication-on-post-or-put-cve-2026-22110-0e785082761944a6 2026-10-30T14:03:25.204Z weekly 0.8 https://radar.offseq.com/threat/a-vulnerability-has-been-found-in-the-dahua-intelligent-connection-center-cve-2025-31704-521b89334daf0efa 2026-10-30T14:02:51.253Z weekly 0.9 https://radar.offseq.com/threat/an-information-disclosure-vulnerability-in-the-forocoches-comments-editor-that-allows-an-attacker-to-23b9ac301e4d66aa 2026-10-30T14:02:47.804Z weekly 0.8 https://radar.offseq.com/threat/the-shipped-webui-template-database-retains-the-factory-default-passwords-for-all-five-account-types-1290d0d6e81a038b 2026-10-30T14:02:44.183Z weekly 0.8 https://radar.offseq.com/threat/delta-ufc500-charging-stations-derive-the-default-credentials-of-the-service-account-from-character-d77c850c91195020 2026-10-30T14:02:41.113Z weekly 0.8 https://radar.offseq.com/threat/an-issue-has-been-discovered-in-clickhouse-server-that-under-certain-conditions-could-allow-an-2eb4202ae28df3fe 2026-10-30T14:02:37.843Z weekly 0.9 https://radar.offseq.com/threat/dell-openmanage-enterprise-versions-prior-to-480-contains-an-improper-privilege-management-cve-2026-db4e5c5088fee368 2026-10-30T14:02:34.479Z weekly 0.8 https://radar.offseq.com/threat/dell-openmanage-enterprise-versions-prior-to-480-contains-an-improper-neutralization-of-special-2cb9be5bbdf3ef3a 2026-10-30T14:02:30.931Z weekly 0.8 https://radar.offseq.com/threat/arketeam-protectel-modules-protectelmaj-and-bdf-are-vulnerable-to-sql-injection-vulnerability-cve-2025-f9793461ee7eb899 2026-10-30T14:02:26.514Z weekly 0.8 https://radar.offseq.com/threat/arketeam-protectel-modules-protectelmaj-and-bdf-are-vulnerable-to-arbitrary-file-upload-cve-2025-68391-73ac3938b358911c 2026-10-30T14:03:22.420Z weekly 0.7 https://radar.offseq.com/threat/arketeam-protectel-modules-protectelmaj-and-bdf-are-vulnerable-to-sql-injection-vulnerability-cve-2025-392bab3981d0f118 2026-10-30T13:51:39.235Z weekly 0.8 https://radar.offseq.com/threat/dell-openmanage-enterprise-versions-prior-to-480-contains-an-improper-neutralization-of-special-c13440bf3da46d02 2026-10-30T13:51:36.172Z weekly 0.8 https://radar.offseq.com/threat/dell-openmanage-enterprise-versions-prior-to-480-contains-a-server-side-request-forgery-ssrf-cve-2026-e49293c7c65c90a4 2026-10-30T14:03:19.593Z weekly 0.7 https://radar.offseq.com/threat/arketeam-protectel-modules-protectelmaj-and-bdf-contain-a-note-editor-module-vulnerable-to-stored-xss-8d98fa3aa34c1ff0 2026-10-30T14:03:16.460Z weekly 0.7 https://radar.offseq.com/threat/a-cross-site-scripting-xss-cwe-79-vulnerability-in-the-authhandler-in-google-cloud-identity-platform-82828ef3d5b6b999 2026-10-30T13:51:32.726Z weekly 0.8 https://radar.offseq.com/threat/arketeam-protectel-modules-protectelmaj-and-bdf-allow-low-privileged-users-to-use-some-of-the-3ab93d4ca26dae99 2026-10-30T14:03:12.831Z weekly 0.7 https://radar.offseq.com/threat/proftpd-before-139e-and-1310rc5-contains-an-authorization-bypass-in-the-modsftp-copy-file-extension-c338b5d2ca639dc3 2026-10-30T14:03:09.788Z weekly 0.7 https://radar.offseq.com/threat/patnik-uses-http-protocol-to-download-updates-libraries-and-support-files-cve-2026-110970-2e4a4a67055b7494 2026-10-30T14:03:06.642Z weekly 0.7 https://radar.offseq.com/threat/sqlite-before-3540-contains-an-information-disclosure-vulnerability-that-allows-attackers-to-read-3f416bdb4e436e13 2026-10-30T14:03:03.481Z weekly 0.7 https://radar.offseq.com/threat/proftpd-through-139e-and-1310rc1-through-1310rc4-contains-a-link-following-vulnerability-in-modcopy-d5ad033fd0dcbee4 2026-10-30T14:02:59.241Z weekly 0.7 https://radar.offseq.com/threat/dell-openmanage-enterprise-versions-prior-to-480-contains-an-improper-neutralization-of-special-1e2894f85311dce8 2026-10-30T13:51:29.299Z weekly 0.8 https://radar.offseq.com/threat/sqlite-before-3540-built-with-fts5-contains-a-heap-buffer-overflow-in-fts5dosecuredelete-that-allows-c11a79c29265216d 2026-10-30T13:51:26.004Z weekly 0.8 https://radar.offseq.com/threat/dell-openmanage-enterprise-versions-prior-to-480-contains-an-improper-neutralization-of-argument-5d604228e1b0c252 2026-10-30T13:47:49.437Z weekly 0.8 https://radar.offseq.com/threat/sqlite-before-3540-built-with-fts5-contains-a-heap-buffer-overflow-in-fts5mergerowidlists-that-d8634d2ba0fbf7a2 2026-10-30T13:47:45.877Z weekly 0.8 https://radar.offseq.com/threat/sqlite-before-3540-built-with-fts3fts4-and-sqliteenablefts3parenthesis-contains-a-use-after-free-3a3c90c62bccd4f3 2026-10-30T14:02:55.440Z weekly 0.7 https://radar.offseq.com/threat/sqlite-before-3540-contains-a-stack-exhaustion-vulnerability-that-allows-attackers-to-bypass-the-b2c2f2f49eaa3dfb 2026-10-30T13:52:38.001Z weekly 0.7 https://radar.offseq.com/threat/proftpd-before-139e-and-1310rc5-contains-a-buffer-overflow-vulnerability-in-the-modrewrite-intutf8trans-698c2fb8f81ccbd8 2026-10-30T13:52:34.426Z weekly 0.7 https://radar.offseq.com/threat/use-of-a-weak-password-encoding-algorithm-in-patnik-software-allows-a-user-who-obtains-encoded-cve-d0764b9b2cd188c8 2026-10-30T13:47:42.483Z weekly 0.8 https://radar.offseq.com/threat/patnik-performs-client-side-authentication-cve-2026-110972-03eaddb82e4df0f8 2026-10-30T13:47:39.396Z weekly 0.8 https://radar.offseq.com/threat/a-null-pointer-dereference-vulnerability-in-the-qt-qcborvalue-to-json-conversion-of-the-qt-core-module-72f0e7485d758f8a 2026-10-30T13:52:30.507Z weekly 0.7 https://radar.offseq.com/threat/n8n-before-2426-243x-before-2433-and-3x-before-301-contains-a-remote-code-execution-vulnerability-via-e6504b13b8eb4c04 2026-10-30T13:47:37.077Z weekly 0.8 https://radar.offseq.com/threat/sqlite-before-3540-built-with-the-session-extension-contains-a-heap-buffer-overflow-vulnerability-in-5cee60a9dc104a9a 2026-10-30T13:47:33.317Z weekly 0.8 https://radar.offseq.com/threat/sqlite-before-3540-contains-a-stack-exhaustion-vulnerability-that-allows-attackers-to-bypass-the-79729290dda2a391 2026-10-30T13:52:27.645Z weekly 0.7 https://radar.offseq.com/threat/element-web-and-element-desktop-before-11232-accept-guest-credentials-from-url-fragment-parameters-in-425c3dda4d591a9b 2026-10-30T13:47:29.884Z weekly 0.8 https://radar.offseq.com/threat/sqlite-before-3540-contains-a-use-after-free-vulnerability-in-the-r-tree-extension-that-allows-71aceded638c0eea 2026-10-30T13:52:24.734Z weekly 0.7 https://radar.offseq.com/threat/opnsense-before-2678-contains-a-command-injection-vulnerability-that-allows-authenticated-users-with-7bd02ae8bf71bef1 2026-10-30T13:47:26.395Z weekly 0.8 https://radar.offseq.com/threat/sqlite-before-3540-contains-an-authorization-bypass-vulnerability-in-lookupname-that-invokes-the-8fa41e2eca683e6a 2026-10-30T13:52:21.534Z weekly 0.7 https://radar.offseq.com/threat/cakephp-through-543-contains-an-sql-injection-vulnerability-that-allows-attackers-to-inject-sql-by-d59390902bd4420a 2026-10-30T13:35:54.645Z weekly 0.8 https://radar.offseq.com/threat/cakephp-through-543-contains-an-improper-cookie-domain-validation-vulnerability-in-the-http-client-949e993e65cde034 2026-10-30T13:52:18.314Z weekly 0.7 https://radar.offseq.com/threat/cakephp-through-543-contains-an-sql-injection-vulnerability-that-allows-attackers-to-inject-sql-by-0137fe738260a0b6 2026-10-30T13:35:51.769Z weekly 0.8 https://radar.offseq.com/threat/bitwarden-server-before-2026101-on-entity-framework-backends-contains-an-authorization-bypass-1e065f75d102852d 2026-10-30T13:52:15.065Z weekly 0.7 https://radar.offseq.com/threat/juspay-hyperswitch-through-11280-and-builds-before-202610190-contains-a-missing-authorization-31abb56e8ef4f4bd 2026-10-30T13:48:50.188Z weekly 0.7 https://radar.offseq.com/threat/cakephp-through-543-contains-a-header-injection-vulnerability-in-formdatapart-that-allows-attackers-to-01719b3fc7555396 2026-10-30T13:48:46.936Z weekly 0.7 https://radar.offseq.com/threat/cakephp-4512-465-518-through-5110-5214-through-5215-537-and-540-through-543-contain-an-email-30ffebaf2e53cf35 2026-10-30T13:48:43.642Z weekly 0.7 https://radar.offseq.com/threat/phpmyadmin-through-523-contains-an-sql-injection-vulnerability-in-designer-savesetting-that-allows-6488cfbf11718a54 2026-10-30T13:48:39.291Z weekly 0.7 https://radar.offseq.com/threat/opnsense-core-2616-through-2677-contains-an-authentication-bypass-vulnerability-in-the-captive-portal-8e813cc44d74d447 2026-10-30T13:48:36.029Z weekly 0.7 https://radar.offseq.com/threat/phpmyadmin-through-523-contains-a-cross-site-request-forgery-vulnerability-that-allows-remote-0a0ab395cf7a2dd1 2026-10-30T13:35:48.432Z weekly 0.8 https://radar.offseq.com/threat/juspay-hyperswitch-before-11280-contains-an-authentication-bypass-vulnerability-that-allows-c8edefd49725c6ba 2026-10-30T13:48:32.418Z weekly 0.7 https://radar.offseq.com/threat/phpmyadmin-through-523-contains-a-server-side-request-forgery-vulnerability-that-allows-beae9a62a2825c4d 2026-10-30T13:48:28.922Z weekly 0.7 https://radar.offseq.com/threat/lago-through-1550-contains-an-authentication-bypass-vulnerability-that-allows-organization-cebaadef3c5e5da8 2026-10-30T13:35:44.978Z weekly 0.8 https://radar.offseq.com/threat/opnsense-core-before-2678-contains-a-log-injection-vulnerability-that-allows-unauthenticated-attackers-86e6d06a7e36507e 2026-10-30T13:48:25.943Z weekly 0.7 https://radar.offseq.com/threat/opnsense-core-before-2678-contains-a-configuration-line-injection-vulnerability-that-allows-7b33522c88aed69e 2026-10-30T13:48:22.692Z weekly 0.7 https://radar.offseq.com/threat/forgejo-through-15011-1600-through-1607-and-1700-through-1701-contains-an-information-disclosure-4d89382b395c47e8 2026-10-30T13:48:19.091Z weekly 0.7 https://radar.offseq.com/threat/jellyfin-through-124-contains-a-server-side-request-forgery-vulnerability-that-lets-authenticated-2f8239b18e229837 2026-10-30T13:35:41.360Z weekly 0.8 https://radar.offseq.com/threat/jellyfin-through-124-contains-an-information-disclosure-vulnerability-in-7e1f598240130bc0 2026-10-30T13:48:15.355Z weekly 0.7 https://radar.offseq.com/threat/forgejo-through-15011-1600-through-1607-and-1700-through-1701-contains-a-server-side-request-forgery-7d5e064db401f7a9 2026-10-30T13:48:11.860Z weekly 0.7 https://radar.offseq.com/threat/lago-through-1550-contains-an-authorization-bypass-vulnerability-in-invoicespaymentsstripeservice-that-997d7510e968b61a 2026-10-30T13:48:07.619Z weekly 0.7 https://radar.offseq.com/threat/forgejo-through-15011-1600-through-1607-and-1700-through-1701-contains-a-path-traversal-vulnerability-483823914aa9b047 2026-10-30T13:48:03.607Z weekly 0.7 https://radar.offseq.com/threat/phpmyadmin-through-523-contains-a-missing-re-authentication-vulnerability-that-allows-authenticated-e02070722dd99184 2026-10-30T13:48:00.002Z weekly 0.7 https://radar.offseq.com/threat/opnsense-core-through-2678-contains-a-configuration-injection-vulnerability-that-allows-authenticated-b8a3cbe339b22cd9 2026-10-30T13:47:56.842Z weekly 0.7 https://radar.offseq.com/threat/moodle-420-through-4515-500-through-5011-510-through-518-520-through-524-and-530-contain-an-caaa02c95ef50eef 2026-10-30T13:47:53.467Z weekly 0.7 https://radar.offseq.com/threat/n8n-from-2140-through-2463-contains-a-path-traversal-vulnerability-in-the-databricks-node-that-allows-da1dce91d8ffdc2e 2026-10-30T13:36:53.817Z weekly 0.7 https://radar.offseq.com/threat/moodle-530-520-through-524-510-through-518-500-through-5011-and-through-4515-contain-an-sql-810ea4ccf91a1add 2026-10-30T13:36:50.459Z weekly 0.7 https://radar.offseq.com/threat/jellyfin-through-124-contains-an-authorization-bypass-vulnerability-in-985e273f36a094eb 2026-10-30T13:36:46.392Z weekly 0.7 https://radar.offseq.com/threat/openlitespeed-through-194-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-74c335ff71194a59 2026-10-30T13:36:43.106Z weekly 0.7 https://radar.offseq.com/threat/moodle-530-520-through-524-510-through-518-500-through-5011-and-through-4515-contains-a-path-74c88939c2cfec12 2026-10-30T13:36:40.015Z weekly 0.7 https://radar.offseq.com/threat/moodle-420-through-4515-500-through-5011-510-through-518-520-through-524-and-530-contain-a-2220c1fad80d8661 2026-10-30T13:36:35.745Z weekly 0.7 https://radar.offseq.com/threat/phpmyadmin-through-523-contains-an-authentication-bypass-vulnerability-in-0d4737b324e38bdb 2026-10-30T13:36:31.928Z weekly 0.7 https://radar.offseq.com/threat/uptime-kuma-through-258-contains-a-race-condition-in-the-socketio-first-run-setup-handler-that-allows-90a5995e2524c3a6 2026-10-30T13:36:28.586Z weekly 0.7 https://radar.offseq.com/threat/phpmyadmin-through-523-contains-an-sql-injection-vulnerability-that-allows-authenticated-users-to-9abfd9b4502160fa 2026-10-30T13:36:25.521Z weekly 0.7 https://radar.offseq.com/threat/opencart-through-4104-contains-a-business-logic-vulnerability-that-allows-logged-in-customers-to-place-fd818bcc53a585cf 2026-10-30T13:36:22.241Z weekly 0.7 https://radar.offseq.com/threat/sqlite-before-3540-contains-a-stack-exhaustion-vulnerability-in-countofviewoptimization-that-allows-ea1fae2f46d24d21 2026-10-30T13:36:19.357Z weekly 0.7 https://radar.offseq.com/threat/sqlite-command-line-shell-through-3541-contains-a-command-injection-vulnerability-in-the-recover-a961b2b175ddbd8b 2026-10-30T13:35:37.699Z weekly 0.8 https://radar.offseq.com/threat/plausible-analytics-community-edition-through-321-contains-an-information-exposure-vulnerability-that-a16c6bc9e4b71db3 2026-10-30T13:36:16.287Z weekly 0.7 https://radar.offseq.com/threat/plausible-analytics-through-321-contains-a-mass-assignment-vulnerability-in-179642726aee6d19 2026-10-30T13:36:12.699Z weekly 0.7 https://radar.offseq.com/threat/prometheus-through-3151-contains-a-credential-leak-vulnerability-that-allows-attackers-to-capture-4387ed3902ecca01 2026-10-30T13:36:09.087Z weekly 0.7 https://radar.offseq.com/threat/vsftpd-through-305-contains-an-authentication-bypass-vulnerability-in-ssldataaccept-that-allows-551d4ed876b05285 2026-10-30T13:35:34.064Z weekly 0.8 https://radar.offseq.com/threat/vsftpd-through-305-contains-an-access-control-bypass-vulnerability-that-allows-authenticated-ftp-users-99aa9d8cfac4feb3 2026-10-30T13:36:05.593Z weekly 0.7 https://radar.offseq.com/threat/phpmyadmin-through-523-contains-a-stored-cross-site-scripting-vulnerability-that-allows-database-users-0f155696ffb54bec 2026-10-30T13:36:02.068Z weekly 0.7 https://radar.offseq.com/threat/bulletproof-host-virtualine-loses-its-domain-to-fbi-seizure-b59285ef244f0c70 2026-10-30T13:47:38.315Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-111498-cwe-413-improper-resource-locking-in-dell-openmanage-enterprise-5078116114dfd660 2026-10-30T13:52:11.894Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-86715-cwe-256-plaintext-storage-of-a-password-in-kriptek-crypto-and-informatics-technologies-ba32fe6a4f1f5589 2026-10-30T13:51:21.934Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-91913-cwe-78-os-command-injection-in-dell-openmanage-enterprise-e954ffa0a8bff404 2026-10-30T13:51:17.125Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-111499-cwe-732-incorrect-permission-assignment-for-critical-resource-in-dell-openmanage-44b408a25d286bb3 2026-10-30T13:52:08.893Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-91914-cwe-290-authentication-bypass-by-spoofing-in-dell-openmanage-enterprise-1e8c359d844a58c5 2026-10-30T13:51:13.858Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-111500-cwe-306-missing-authentication-for-critical-functionality-in-dell-openmanage-enterprise-637aee9f6869f5f7 2026-10-30T13:52:06.154Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-115683-time-of-check-time-of-use-toctou-race-condition-in-gnome-epiphany-80c33af036651e72 2026-10-30T13:52:02.828Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-117028-skuul-school-management-system-through-version-265-is-vulnerable-to-incorrect-access-03745f18dc487f51 2026-10-30T13:51:58.307Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-91915-cwe-74-injection-in-dell-openmanage-enterprise-5a1597b99993937e 2026-10-30T13:51:55.913Z weekly 0.7 https://radar.offseq.com/threat/moderate-kernel-security-update-cve-2025-39697-075a85be673bb212 2026-10-30T13:51:50.034Z weekly 0.7 https://radar.offseq.com/threat/moderate-kernel-security-update-cve-2024-43842-1780c34feb962a50 2026-10-30T13:51:44.988Z weekly 0.7 https://radar.offseq.com/threat/moustachedbouncer-espionage-against-foreign-diplomats-in-belarus-ce2c760f9eee49c9 2026-10-30T14:05:19.035Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-119528-stack-based-buffer-overflow-in-red-hat-red-hat-enterprise-linux-10-ee8f88fdb836444c 2026-10-30T14:05:15.865Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-91912-cwe-321-use-of-hard-coded-cryptographic-key-in-dell-openmanage-enterprise-b60fcc41c72a44e9 2026-10-30T14:05:11.143Z weekly 0.8