https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T12:07:02.652318+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2026-01718 bdu:2026-01718 2026-09-29T12:07:02.723802+00:00 bdu:2026-01718 https://vulnerability.circl.lu/vuln/cleanstart-2026-ce10526 Withdrawn: CLEANSTART-2026-CE10526 — Security fixes for CVE-2025-64756, CVE-2025-69873, CVE-2026-1525, CVE-2026-1526, CVE-2026-1527, CVE-2026-1528, CVE-2026… 2026-09-29T12:07:02.723874+00:00

Withdrawn by the publisher.

Affected: CleanStart: renovate

Multiple security vulnerabilities affect the renovate package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://vulnerability.circl.lu/vuln/cve-2026-25547 CVE-2026-25547 — Uncontrolled Resource Consumption in @isaacs/brace-expansion 2026-09-29T12:07:02.723952+00:00

Affected: isaacs brace-expansion

@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service (DoS) issue caused by unbounded brace range expansion. When an attacker provides a pattern containing repeated numeric brace ranges, the library attempts to eagerly generate every possible combination synchronously. Because the expansion grows exponentially, even a small input can consume excessive CPU and memory and may crash the Node.js process. This issue has been patched in version 5.0.1.