https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T22:35:30.718929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-02573 cnvd-2020-02573 2026-10-16T22:35:30.722002+00:00 cnvd-2020-02573 https://cve.radiocsirt.org/vuln/euvd-2026-58421 EUVD-2026-58421 2026-10-16T22:35:30.722035+00:00 EUVD-2026-58421 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17556 fkie_cve-2019-17556 2026-10-16T22:35:30.722049+00:00

Apache Olingo versions 4.0.0 to 4.6.0 provide the AbstractService class, which is public API, uses ObjectInputStream and doesn't check classes being deserialized. If an attacker can feed malicious metadata to the class, then it may result in running attacker's code in the worse case.

 https://cve.radiocsirt.org/vuln/ghsa-gj76-429m-56wc GHSA-gj76-429m-56wc — Deserialization of Untrusted Data in Apache Olingo 2026-10-16T22:35:30.722077+00:00

Affected: Maven: org.apache.olingo:odata-client-proxy

Apache Olingo versions 4.0.0 to 4.6.0 provide the AbstractService class, which is public API, uses ObjectInputStream and doesn't check classes being deserialized. If an attacker can feed malicious metadata to the class, then it may result in running attacker's code in the worse case.

 https://cve.radiocsirt.org/vuln/gsd-2019-17556 gsd-2019-17556 2026-10-16T22:35:30.722101+00:00 gsd-2019-17556