https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:18:57.985358+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-105654 EUVD-2026-105654 2026-10-02T21:18:58.012332+00:00 EUVD-2026-105654 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1821 fkie_cve-2013-1821 2026-10-02T21:18:58.012375+00:00

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

 https://cve.radiocsirt.org/vuln/ghsa-hgg7-cghq-xhf4 GHSA-hgg7-cghq-xhf4 — Ruby vulnerable to denial of service 2026-10-02T21:18:58.012408+00:00

Affected: Maven: org.jruby:jruby

When reading text nodes from an XML document, the REXML parser can be coerced in to allocating extremely large string objects which can consume all of the memory on a machine, causing a denial of service.

Jruby resolves this bug in version 1.7.3 as noted in https://www.jruby.org/2013/02/21/jruby-1-7-3.html

 https://cve.radiocsirt.org/vuln/gsd-2013-1821 gsd-2013-1821 2026-10-02T21:18:58.012434+00:00 gsd-2013-1821 https://cve.radiocsirt.org/vuln/rhsa-2013:0611 RHSA-2013:0611 — Red Hat Security Advisory: ruby security update 2026-10-02T21:18:58.012447+00:00

ruby: entity expansion DoS vulnerability in REXML

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1601 WID-SEC-W-2023-1601 — Red Hat JBoss Enterprise SOA Platform: Mehrere Schwachstellen 2026-10-02T21:18:58.012464+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise SOA Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen zu manipulieren oder um einen Denial of Service Angriff durchzuführen.