https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:48:39.479653+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-05189 bdu:2020-05189 2026-10-03T06:48:39.585331+00:00 bdu:2020-05189 https://cve.radiocsirt.org/vuln/cnvd-2020-41503 cnvd-2020-41503 2026-10-03T06:48:39.585370+00:00 cnvd-2020-41503 https://cve.radiocsirt.org/vuln/euvd-2026-40982 EUVD-2026-40982 2026-10-03T06:48:39.585386+00:00 EUVD-2026-40982 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11973 fkie_cve-2020-11973 2026-10-03T06:48:39.585398+00:00

Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.

 https://cve.radiocsirt.org/vuln/ghsa-h79p-32mx-fjj9 GHSA-h79p-32mx-fjj9 — Apache Camel Netty enables Java deserialization by default 2026-10-03T06:48:39.585428+00:00

Affected: Maven: org.apache.camel:camel-netty

Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.

 https://cve.radiocsirt.org/vuln/gsd-2020-11973 gsd-2020-11973 2026-10-03T06:48:39.585463+00:00 gsd-2020-11973 https://cve.radiocsirt.org/vuln/rhsa-2020:5568 RHSA-2020:5568 — Red Hat Security Advisory: Red Hat Fuse 7.8.0 release and security update 2026-10-03T06:48:39.585476+00:00

jackson-modules-java8: DoS due to an Improper Input Validation thrift: Endless loop when feed with specific input data thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol mysql-connector-java: privilege escalation in MySQL connector spring-ws: XML External Entity Injection (XXE) when receiving XML data from untrusted sources spring-batch: XML External Entity Injection (XXE) when receiving XML data from untrusted sources codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities hibernate-validator: safeHTML validator allows XSS AngularJS: Prototype pollution in merge function could result in code injection org.eclipse.paho.client.mqttv3: Improper hostname validation in the MQTT library cxf: does not restrict the number of message attachments cxf: OpenId Connect token service does not properly validate the clientId libquartz: XXE attacks via job description hibernate: SQL injection issue in Hibernate ORM batik: SSRF via "xlink:href" jetty: double release of resource can lead to information disclosure Undertow: Memory Leak in Undertow HttpOpenListener due to holding remoting connections indefinitely keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain tika: excessive memory usage in PSDParser apache-flink: JMX information disclosure vulnerability springframework: RFD attack via Content-Dispos…