https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:10:13.569695+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-09-28T13:10:17.142183+00:00 certfr-2026-avi-1165 https://vulnerability.circl.lu/vuln/cleanstart-2026-yt00725 CLEANSTART-2026-YT00725 — baseline-browser-mapping 2 2026-09-28T13:10:17.142319+00:00

Affected: CleanStart: qdrant

Security vulnerability affects the qdrant package. baseline-browser-mapping 2.

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-45819 fkie_cve-2026-45819 2026-09-28T13:10:17.142388+00:00

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

 https://vulnerability.circl.lu/vuln/ghsa-w5vr-8v7q-w6rv GHSA-w5vr-8v7q-w6rv — baseline-browser-mapping process termination on invalid input causes denial of service 2026-09-28T13:10:17.142433+00:00

Affected: npm: baseline-browser-mapping

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

 https://vulnerability.circl.lu/vuln/rhsa-2026:54517 RHSA-2026:54517 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-09-28T13:10:17.142472+00:00

fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling DOMPurify: DOMPurify: Cross-Site Scripting via unsanitized DOM elements from different realms DOMPurify: DOMPurify: Cross-site scripting due to state leakage in sanitization. dompurify: DOMPurify: URI validation bypass leads to cross-site scripting dompurify: DOMPurify: Cross-Site Scripting (XSS) via prototype pollution in USE_PROFILES mode dompurify: DOMPurify: Cross-Site Scripting vulnerability allows arbitrary code execution browserslist: Browserslist: Prototype pollution leading to denial of service browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results