https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:23:46.836257+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-172711 EUVD-2026-172711 2026-10-02T23:23:46.906349+00:00 EUVD-2026-172711 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3774 fkie_cve-2019-3774 2026-10-02T23:23:46.906385+00:00

Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

 https://cve.radiocsirt.org/vuln/ghsa-3wc8-659g-r88q GHSA-3wc8-659g-r88q — Low severity vulnerability that affects org.springframework.batch:spring-batch-core 2026-10-02T23:23:46.906416+00:00

Affected: Maven: org.springframework.batch:spring-batch-core

Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

 https://cve.radiocsirt.org/vuln/gsd-2019-3774 gsd-2019-3774 2026-10-02T23:23:46.906441+00:00 gsd-2019-3774 https://cve.radiocsirt.org/vuln/rhsa-2020:5568 RHSA-2020:5568 — Red Hat Security Advisory: Red Hat Fuse 7.8.0 release and security update 2026-10-02T23:23:46.906454+00:00

jackson-modules-java8: DoS due to an Improper Input Validation thrift: Endless loop when feed with specific input data thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol mysql-connector-java: privilege escalation in MySQL connector spring-ws: XML External Entity Injection (XXE) when receiving XML data from untrusted sources spring-batch: XML External Entity Injection (XXE) when receiving XML data from untrusted sources codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities hibernate-validator: safeHTML validator allows XSS AngularJS: Prototype pollution in merge function could result in code injection org.eclipse.paho.client.mqttv3: Improper hostname validation in the MQTT library cxf: does not restrict the number of message attachments cxf: OpenId Connect token service does not properly validate the clientId libquartz: XXE attacks via job description hibernate: SQL injection issue in Hibernate ORM batik: SSRF via "xlink:href" jetty: double release of resource can lead to information disclosure Undertow: Memory Leak in Undertow HttpOpenListener due to holding remoting connections indefinitely keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain tika: excessive memory usage in PSDParser apache-flink: JMX information disclosure vulnerability springframework: RFD attack via Content-Dispos…