https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:56:06.026662+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-10829 cnvd-2017-10829 2026-10-06T13:56:06.092250+00:00 cnvd-2017-10829 https://cve.radiocsirt.org/vuln/euvd-2026-72752 EUVD-2026-72752 2026-10-06T13:56:06.092294+00:00 EUVD-2026-72752 https://cve.radiocsirt.org/vuln/fkie_cve-2017-3199 fkie_cve-2017-3199 2026-10-06T13:56:06.092310+00:00

The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.

 https://cve.radiocsirt.org/vuln/ghsa-8m35-r25c-qr56 GHSA-8m35-r25c-qr56 — GraniteDS Insecure Deserialization 2026-10-06T13:56:06.092343+00:00

Affected: Maven: org.graniteds:granite-core

The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.

 https://cve.radiocsirt.org/vuln/gsd-2017-3199 gsd-2017-3199 2026-10-06T13:56:06.092369+00:00 gsd-2017-3199