https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:07:13.225075+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02259 bdu:2024-02259 2026-10-03T09:07:13.316490+00:00 bdu:2024-02259 https://cve.radiocsirt.org/vuln/euvd-2026-184503 EUVD-2026-184503 2026-10-03T09:07:13.316531+00:00 EUVD-2026-184503 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23463 fkie_cve-2021-23463 2026-10-03T09:07:13.316553+00:00

The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data from org.h2.jdbc.JdbcResultSet.getSQLXML() method. If it executes the getSource() method when the parameter is DOMSource.class it will trigger the vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-7rpj-hg47-cx62 GHSA-7rpj-hg47-cx62 — Improper Restriction of XML External Entity Reference in com.h2database:h2. 2026-10-03T09:07:13.316597+00:00

Affected: Maven: com.h2database:h2

H2 is an embeddable RDBMS written in Java. The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data from org.h2.jdbc.JdbcResultSet.getSQLXML() method. If it executes the getSource() method when the parameter is DOMSource.class it will trigger the vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2021-23463 gsd-2021-23463 2026-10-03T09:07:13.316638+00:00 gsd-2021-23463