https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:16:44.497635+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-21097 cnvd-2020-21097 2026-10-12T22:16:44.532514+00:00 cnvd-2020-21097 https://cve.radiocsirt.org/vuln/euvd-2026-35753 EUVD-2026-35753 2026-10-12T22:16:44.532550+00:00 EUVD-2026-35753 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1947 fkie_cve-2020-1947 2026-10-12T22:16:44.532565+00:00

In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE.

 https://cve.radiocsirt.org/vuln/ghsa-v54f-xcmp-43cr GHSA-v54f-xcmp-43cr — Deserialization of Untrusted Data in Apache ShardingSphere 2026-10-12T22:16:44.532594+00:00

Affected: Maven: org.apache.shardingsphere:shardingsphere

In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE.

 https://cve.radiocsirt.org/vuln/gsd-2020-1947 gsd-2020-1947 2026-10-12T22:16:44.532618+00:00 gsd-2020-1947