https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:26:19.952205+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-39539 cnvd-2021-39539 2026-10-03T18:26:20.032111+00:00 cnvd-2021-39539 https://cve.radiocsirt.org/vuln/euvd-2026-167902 EUVD-2026-167902 2026-10-03T18:26:20.032149+00:00 EUVD-2026-167902 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5412 fkie_cve-2020-5412 2026-10-03T18:26:20.032164+00:00

Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can send a request to other servers that should not be exposed publicly.

 https://cve.radiocsirt.org/vuln/ghsa-qgcg-p3v2-9h4p GHSA-qgcg-p3v2-9h4p — Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix 2026-10-03T18:26:20.032194+00:00

Affected: Maven: org.springframework.cloud:spring-cloud-netflix

Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can send a request to other servers that should not be exposed publicly.

 https://cve.radiocsirt.org/vuln/gsd-2020-5412 gsd-2020-5412 2026-10-03T18:26:20.032219+00:00 gsd-2020-5412