https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:31:46.268503+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-005 certfr-2022-avi-005 — Une vulnérabilité a été découverte dans VMware Spring. Elle permet à un attaquant de provoquer une atteinte à l'intégri… 2026-10-02T14:31:46.405586+00:00 certfr-2022-avi-005 https://cve.radiocsirt.org/vuln/euvd-2026-22634 EUVD-2026-22634 2026-10-02T14:31:46.405633+00:00 EUVD-2026-22634 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22096 fkie_cve-2021-22096 2026-10-02T14:31:46.405649+00:00

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

 https://cve.radiocsirt.org/vuln/ghsa-rfmp-97jj-h8m6 GHSA-rfmp-97jj-h8m6 — Improper Output Neutralization for Logs in Spring Framework 2026-10-02T14:31:46.405679+00:00

Affected: Maven: org.springframework:spring-core, Maven: org.springframework:spring

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

 https://cve.radiocsirt.org/vuln/gsd-2021-22096 gsd-2021-22096 2026-10-02T14:31:46.405707+00:00 gsd-2021-22096 https://cve.radiocsirt.org/vuln/rhsa-2022:1108 RHSA-2022:1108 — Red Hat Security Advisory: Red Hat Process Automation Manager 7.12.1 security update 2026-10-02T14:31:46.405719+00:00

netty: Information disclosure via the local system temporary directory springframework: malicious input leads to insertion of additional log entries apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 jdom: XXE allows attackers to cause a DoS via a crafted HTTP request logback: remote code execution through JNDI call from within its configuration file

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22096 UBUNTU-CVE-2021-22096 2026-10-02T14:31:46.405743+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0095 WID-SEC-W-2022-0095 — VMware Tanzu Spring Framework: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-02T14:31:46.405774+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in VMware Tanzu Spring Framework ausnutzen, um Dateien zu manipulieren.