https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:04:53.454580+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-22663 EUVD-2026-22663 2026-10-05T22:04:53.457755+00:00 EUVD-2026-22663 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22047 fkie_cve-2021-22047 2026-10-05T22:04:53.457790+00:00

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for unauthorized access depending on the Spring Security configuration.

 https://cve.radiocsirt.org/vuln/ghsa-4926-qpxg-6r3w GHSA-4926-qpxg-6r3w — Exposure of Resource to Wrong Sphere in Spring Data REST 2026-10-05T22:04:53.457821+00:00

Affected: Maven: org.springframework.data:spring-data-rest-core

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for unauthorized access depending on the Spring Security configuration.

 https://cve.radiocsirt.org/vuln/gsd-2021-22047 gsd-2021-22047 2026-10-05T22:04:53.457847+00:00 gsd-2021-22047