https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:51:10.543945+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1860 ALSA-2022:1860 — Moderate: maven:3.6 security and enhancement update 2026-10-04T06:51:11.071355+00:00

Affected: AlmaLinux:8: aopalliance, AlmaLinux:8: apache-commons-cli, AlmaLinux:8: apache-commons-codec, AlmaLinux:8: apache-commons-io, AlmaLinux:8: apache-commons-lang3, AlmaLinux:8: atinject, AlmaLinux:8: cdi-api, AlmaLinux:8: geronimo-annotation, AlmaLinux:8: google-guice, AlmaLinux:8: guava and 22 more

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

* apache-httpclient: incorrect handling of malformed authority component in request URIs (CVE-2020-13956)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-05212 bdu:2023-05212 2026-10-04T06:51:11.071497+00:00 bdu:2023-05212 https://cve.radiocsirt.org/vuln/certfr-2021-avi-556 certfr-2021-avi-556 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu… 2026-10-04T06:51:11.071525+00:00 certfr-2021-avi-556 https://cve.radiocsirt.org/vuln/cnvd-2021-24248 cnvd-2021-24248 2026-10-04T06:51:11.071543+00:00 cnvd-2021-24248 https://cve.radiocsirt.org/vuln/euvd-2026-262110 EUVD-2026-262110 2026-10-04T06:51:11.071555+00:00 EUVD-2026-262110 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13956 fkie_cve-2020-13956 2026-10-04T06:51:11.071566+00:00

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

 https://cve.radiocsirt.org/vuln/ghsa-7r82-7xv7-xcpj GHSA-7r82-7xv7-xcpj — Cross-site scripting in Apache HttpClient 2026-10-04T06:51:11.071589+00:00

Affected: Maven: org.apache.httpcomponents:httpclient

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

 https://cve.radiocsirt.org/vuln/gsd-2020-13956 gsd-2020-13956 2026-10-04T06:51:11.071612+00:00 gsd-2020-13956 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10687-1 openSUSE-SU-2024:10687-1 — clojure-1.10.3.855-1.2 on GA media 2026-10-04T06:51:11.071624+00:00

clojure-1.10.3.855-1.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:0084 RHSA-2021:0084 — Red Hat Security Advisory: Red Hat build of Quarkus 1.7.6 release and security update 2026-10-04T06:51:11.071643+00:00

apache-httpclient: incorrect handling of malformed authority component in request URIs

 https://cve.radiocsirt.org/vuln/suse-su-2024:4036-1 SUSE-SU-2024:4036-1 — Security update for httpcomponents-client, httpcomponents-core 2026-10-04T06:51:11.071659+00:00

Security update for httpcomponents-client, httpcomponents-core

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13956 UBUNTU-CVE-2020-13956 2026-10-04T06:51:11.071674+00:00

Affected: Ubuntu:Pro:14.04:LTS: httpcomponents-client, Ubuntu:Pro:16.04:LTS: httpcomponents-client, Ubuntu:Pro:18.04:LTS: httpcomponents-client, Ubuntu:Pro:20.04:LTS: httpcomponents-client

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0044 WID-SEC-W-2022-0044 — Apache HttpComponents: Schwachstelle ermöglicht Täuschung des Nutzers 2026-10-04T06:51:11.071698+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache HttpComponents ausnutzen, um den Nutzer zu täuschen.